🚨 Emerging Threat: php2shell. Critical RCE, actively exploited. Read our research 🚨 EMERGING THREAT: PHP2SHELL.
CyCognito Blog
Zohar Venturero

Search the Blog

By Zohar Venturero ・

Our new study looks under the hood of domain-to-IP volatility to understand how modern infrastructure behaves and why it matters for enterprise security operations. Read the research for a deeper look at the mechanics behind changing DNS resolution and what it means for tracking assets and exposure over time.

Read more about Domain-to-IP Volatility at Scale: A Study of 4 Million Enterprise Domains
By Zohar Venturero ・

We analyzed more than two million internet-exposed assets across cloud, on-prem, APIs, and web apps, discovered by our platform over the past 18 months. Using attacker-simulated testing, including black-box pentesting, dynamic application security testing (DAST), and active vulnerability scanning, we mapped how exploitable exposures cluster by industry and asset type. The results reveal systemic weaknesses in how organizations govern their digital perimeter, especially in environments shaped by rapid growth, third-party dependencies, and fragmented ownership.

Read more about What Over 2 Million Assets Reveal About Industry Vulnerability