IT Governance, the global cyber security and penetration testing services provider, has released a new infographic that reveals key statistics about the exploitation of web applications by cyber criminals.
Download the infographic from:
www.itgovernance.co.uk/pentesting-infographic.aspx.
Summarising findings from reputable sources and surveys, including Forbes and the M-Trends 2015 report, the infographic aims to draw attention to the imminent threat from web-based cyber attacks. Quoting a report by Sophos, it says that 30,000 websites are hacked every day to distribute malware.
Worryingly, over 80% of hacked sites are legitimate small businesses that are unwittingly distributing malicious code for cyber criminals.
Geraint Williams, head of technical services at IT Governance and a CREST-qualified penetration tester, says, “Websites and web applications are an attractive target for cyber criminals as they often have vulnerabilities that can be easily exploited.
“The fact that an organisation has not yet been breached, for instance, does not necessarily mean that it won’t be at some point in the future. There’s also the possibility that it has already been breached without anyone even noticing.”
The infographic calls for immediate action and stresses the importance of testing an organisation’s networks and web applications.
Williams says, “Regular vulnerability scans and penetration tests are necessary to determine your vulnerabilities and security holes as quickly as possible, and to ensure that your security controls are working.”
A
penetration test is a simulated attack on a computer system with the intention of finding security weaknesses that could be exploited.
IT Governance offers fixed-price or bespoke penetration tests that can meet every testing requirement and budget.
These include
Network Infrastructure,
Wireless Networks, and
Websites and Web Applications penetration tests.
Organisations can book their vulnerability scan or penetration test with IT Governance online, or call +44 (0)845 070 1750 or send
an email to request a custom quote.