Ncurity Says Censys Can Help Prevent Additional Financial Sector Breaches, Emphasizes Identifying Externally Exposed Assets

In recent months, the financial sector has continued to see personal data breaches targeting banks, savings banks, and capital firms. As a result, the importance of strengthening security management for externally exposed assets that can access customer information is growing.

Ncurity CEO Kim Dong-wook said Censys ASM can be used as a way to prevent additional breaches in the financial sector. Censys ASM is an Attack Surface Management security solution that identifies an organization's externally exposed assets and manages related risks.

The solution helps detect assets that an organization may not be aware of from an external perspective, similar to an attacker, and also supports the detection of configuration errors and known vulnerabilities. In addition, web services and admin pages accessible from outside may be left out of internal asset lists, and if such omissions occur, blind spots can emerge in security inspections.

Ncurity explained that using Censys ASM makes it possible to identify assets exposed to the outside world that an organization is unaware of, and that security teams can take the necessary measures, including checking exposure status, restricting access, and addressing vulnerabilities. It also emphasized that Censys can help prevent additional breaches in the financial sector and that identifying externally exposed assets is important.

The company said recent cyberattacks tend to involve broadly scanning systems exposed to the internet and then selecting vulnerable targets for attack. It added that it is important to identify and manage externally exposed points that could be exploited in attacks in advance.

In line with this trend, the company said Censys ASM goes beyond one-time asset checks. Based on the global internet intelligence accumulated by Censys, it identifies an organization's externally exposed assets, continuously monitors changes in externally exposed assets and risk factors, and provides functionality to track newly emerging exposure and risk factors.

The company also said Censys ASM does not require a separate agent to be installed on the system. It also does not directly burden services that are currently operating.

With these characteristics, the company said financial institutions can identify externally exposed assets and manage related risks while minimizing the impact on service continuity. The photo shows a Censys ASM dashboard screen that allows users to check the status of externally exposed assets by type and major risks, provided by Ncurity.

The solution can also be applied not only in the financial sector but also to companies and institutions in telecommunications, the public sector, healthcare, and other organizations that operate customer-facing services 24/7. These companies and institutions can use it to understand their external attack surface and to inspect security blind spots.

Choi Hong-jun, executive director of Ncurity's strategic business division, pointed out that it is difficult to grasp the full scope of services actually exposed externally based only on an inventory of assets owned. He emphasized the need to first verify assets accessible from outside to prevent omissions of assets that could be exploited in attacks, and said it is important to continuously inspect newly emerging exposure and risks.

Ncurity is Censys' official distributor in South Korea. The company supplies solutions to domestic companies and institutions and also provides technical support tailored to customer environments.

Source: TECHWORLD · Kim Gyeong-ju
Original: https://www.epnc.co.kr/news/articleView.html?idxno=407970

References

• https://www.epnc.co.kr/news/articleView.html?idxno=407970