From Stuxnet to the Office of Personnel Management and then Sunburst, what have we learnt and what is so obvious, no one is looking at what is staring them in the face?
Organisations rely on strong authentication as a capability to provide access to their corporate assets. For many years Public Key Infrastructure (PKI) and SSH Keys have been at the forefront of these types of critical security controls. However until now PKI systems didn’t allow owners to find all the certificates and keys on their systems.
As a small part of our Cyber Risk Assessments for clients we utilise our PKI discovery and Enterprise tool set which identifies risks in the form of 'retired and revoked certificates in their hundreds, often thousands across an Enterprise. The below extract of a recent sub £100M client was performed on just 2 of their 'gold standard' Windows builds of both OS 10 and OS 7.
