There is almost no company in Russia that hackers cannot break into 08:00

Only 4% of Russian organizations are protected against intruders penetrating their internal networks. In all other companies, attackers can gain full control over the IT infrastructure. The minimum time for penetration into the local network was one day. socialbites.ca learned about this from a new study by Positive Technologies (PT).

As part of the study, YT experts conducted penetration tests (pentests) on the infrastructure of 28 organizations. The purpose of the tests is to determine whether external or internal attackers can successfully attack an organization and cause an unacceptable business event. Researchers from the PT SWARM team conducted penetration tests on companies from various sectors, including IT, finance, industry, services, telecommunications, and others.

The research showed that in 63% of organizations, a low-skilled attacker was able to enter the local computer network (LAN) from outside, and in the same percentage of organizations, a low-skilled internal attacker was able to take full control of the IT infrastructure.

In 96% of the projects, organizations were vulnerable to attackers penetrating their internal networks. Only one company was well protected, and researchers were only able to access the demilitarized zone (the buffer zone between the Internet and the internal network) thanks to high-quality work done on previous penetration testing and remediation of vulnerabilities.

The fastest LAN access occurred on the first day of employment, with experts taking an average of 10 days to gain access.

Almost all companies have managed to compromise employee credentials and gain unauthorized access to important confidential information, including intellectual property and official correspondence.

It was there before set The timing of the launch of mass production of Russian processors.