Survey: Hackers for Hire Find Most Networks Easy Prey

Rapid7's analysis of 128 penetration tests found that most organizations have exploitable software vulnerabilities and weak detection: 76% of testers could probe client networks for a week or more without detection and 66% were never detected; credential theft occurred in 46% of engagements (31% of external tests, 81% of internal), fewer than one-third of networks were free of exploitable flaws, and only 13% of domains used two-factor authentication.