Education Sector is Most Exposed to Remote Attacks

A CyCognito study analyzing two million internet-exposed assets (Jan–Jun) found 14% of cloud assets, 21% of APIs, and 20% of web apps vulnerable to compromise, with education the most exposed sector (31% overall; 38% APIs; 35% web apps), followed by professional services, retail, government, and media. The report attributes risk to factors like shadow IT, third-party integrations, legacy technology, and asset sprawl, and stresses the need for contextual understanding of asset ownership, function, and attacker perspective to effectively manage exposure and potential impact.