Connect with us

Technology

40% of Environments are Vulnerable to Full Take Over, New Picus Security Report Unveils

Published

2 years ago

on

The Picus Blue Report 2024 also found, security controls for macOS endpoints only prevented 23% of simulated attacks, compared to over 60% for Windows and Linux

SAN FRANCISCO, July 30, 2024 /PRNewswire/ — Picus Security, the leading security validation company, has released The Blue Report 2024: State of Exposure Management* that revealed 40% of tested environments allowed attack paths that lead to domain admin access. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT infrastructure, and is like giving attackers a master key. The report was based on a worldwide comprehensive analysis of more than 136 million cyber attacks simulated by the Picus Security Validation Platform.

The Security Domino Effect is Concerning

The report reveals that, on average, organizations prevent 7 out of 10 of attacks, but are still at risk of major cyber incidents because of gaps in threat exposure management that can permit attackers using automation to move laterally through enterprise networks. Of all attacks simulated, only 56% were logged by organizations’ detection tools, and only 12% triggered an alert. 

“Like a cascade of falling dominoes that starts with a single push, small gaps in cybersecurity can lead to big breaches,” said Dr. Suleyman Ozarslan, Picus co-founder and VP of Picus Labs. “It’s clear that organizations are still experiencing challenges when it comes to threat exposure management and balancing priorities. Small gaps that lead to attackers obtaining domain admin access are not isolated incidents, they are widespread. Last year, the attack on MGM used domain admin privileges and super admin accounts. It stopped slot machines, shut down virtually all systems, and blocked a multi-billion-dollar company from doing business for days.” 

Well over a third (40%) of environments have weaknesses that allow attackers with initial access to a network to achieve domain admin privileges. Once they have these privileges they can manage user accounts or modify security settings. A compromised domain admin account can lead to full control of the network, allowing attackers to conduct data exfiltration, deploy malware, or disrupt business operations.

macOS EDR Misconfigurations Lead to Vulnerabilities

The Blue Report 2024 also highlights that macOS endpoints are far more likely to be misconfigured or allowed to operate without Endpoint Detection and Response (EDR). macOS endpoints only prevented 23% of simulated attacks, compared to 62% and 65% for Windows and Linux. This highlights a potential gap in IT and security team skill sets and approach in securing macOS environments.

“While we have found Macs are less vulnerable to start, the reality today is that security teams are not putting adequate resources into securing macOS systems,” said Volkan Ertürk, Picus Security Co-Founder and CTO. “Our recent Blue Report research shows that security teams need to validate their macOS systems to surface configuration issues. Threat repositories, like the Picus Threat Library, are armed with the latest and most prominent macOS specific threats to help organizations streamline their validation and mitigation efforts. 

The Blue Report 2024 helps security teams benchmark their performance against peers and identify areas for improvement. Additional key findings include:

Common language passwords: 25% of companies use passwords that are words commonly found in the dictionary. This means that it is easy for attackers to crack hashed passwords and obtain cleartext credentials.Organizations only prevent 9% of data exfiltration techniques used by attackers. Data exfiltration is used to steal sensitive data and is commonly used in ransomware attacks.BlackByte, the most challenging ransomware group for organizations to defend against, is prevented by just 17% of organizations, followed by BabLock (20%) and Hive (30%).

For more information: 

Download the Picus Blue Report 2024Read the Blue Report 2024 blogBlue Report 2024 Media Kit

*Methodology:

The findings in this report are based on the results of simulated attack scenarios executed by Picus Security customers from January to June 2024. The data has been anonymized and aggregated from 136 million attack simulations. Research and analysis was completed by Picus Labs, the research team of Picus Security.

About Picus Security

Picus Security, the leading security validation company, gives organizations their validated risk level and pinpoints critical gaps. Picus Security Validation Platform transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on high-impact fixes. The Picus Exposure Data Fabric and Numi AI™ help security teams understand their risk and prioritize a short-list worth pursuing. 

The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing. Picus Security also has a willingness to recommend percentage of  95% in the 2024 Gartner® Peer Insights™ Voice of the Customer for Breach and Attack Simulation Tools**.

** Gartner, Voice of the Customer for Breach and Attack Simulation Tools, Peer Contributors, 30 January 2024 

GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

Logo: https://mma.prnewswire.com/media/2183222/4835187/Picus_Logo.jpg

View original content:https://www.prnewswire.co.uk/news-releases/40-of-environments-are-vulnerable-to-full-take-over-new-picus-security-report-unveils-302209716.html

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Taiwan’s Smart Tolling Technology Goes Global as Thailand Launches AI-Powered M81 Motorway System

Published

19 minutes ago

on

April 22, 2026

By

TAIPEI, April 22, 2026 /PRNewswire/ — Sightings of electronic toll collection (ETC) gantries resembling those used on Taiwan’s freeways have recently drawn attention on social media along the Bangkok–Kanchanaburi highway. Far Eastern Electronic Toll Collection Co., Ltd. (FETC) confirmed that the system is part of Thailand’s newly launched M-Flow multi-lane free-flow tolling system on the Intercity Motorway No. 81 Bang Yai – Kanchanaburi Route (M81).

Developed in collaboration with FETC International (Thailand) Co., Ltd. (FETCi Thailand) and the BGSR81 Co., Ltd, the system has officially entered operation, marking a significant milestone in Thailand’s transition toward smart, digitally enabled highway infrastructure.

The launch also strengthens connectivity between Bangkok and Kanchanaburi, effectively creating a “one-day travel corridor” and supporting regional tourism and economic activity.

AI-Driven Tolling Cuts Travel Time to 48 Minutes

According to Kenny Chen, Managing Director of FETCi Thailand, the M81 project demonstrates the flexibility and scalability of Taiwan’s ETC technology in complex international environments.

FETCi Thailand led the design, installation, and implementation of the tolling system and its Traffic Operations Center (TOC). The platform integrates artificial intelligence (AI) and Internet of Things (IoT) technologies to enable data-driven traffic management and operational decision-making. It is also designed for future expansion, including applications such as weigh-in-motion enforcement.

Thailand’s diverse vehicle types and more complex license plate formats presented technical challenges. These were addressed through advanced AI-powered automatic license plate recognition (ALPR), ensuring high accuracy in vehicle identification. Combined with multiple digital payment options, the system allows vehicles to pass through toll points without stopping.

Since its launch, travel time between Bangkok and Kanchanaburi has been reduced from nearly two hours to approximately 48 minutes. Weekend traffic volumes have reached around 55,000 vehicles per day, improving both tourism access and logistics efficiency in western Thailand.

M9 Experience Highlights Strong Economic and Environmental Benefits

FETC has also supported Thailand’s Department of Highways (DOH) since 2022 in deploying and operating the M-Flow system on the M9 motorway, including gantry design and operational consulting.

According to DOH data, the system has increased traffic throughput fivefold and saves motorists an estimated 3.33 million hours annually. It has achieved a benefit-cost ratio of 6.94, meaning each dollar invested generates nearly seven dollars in overall societal value.

In environmental terms, the system reduces fuel consumption by approximately 13.91 million liters per year and cuts carbon emissions by more than 36,000 metric tons, contributing to more sustainable transportation.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/taiwans-smart-tolling-technology-goes-global-as-thailand-launches-ai-powered-m81-motorway-system-302748486.html

SOURCE FETC International

Continue Reading

Technology

Critical Link Launches World’s First AI-Driven SOM Recommendation Engine, Powered by Rapidflare

Published

19 minutes ago

on

April 22, 2026

By

Critical Link and Rapidflare have jointly launched the world’s first AI-driven System on Module Recommendation Engine. Engineers can now describe their requirements in plain language and receive accurate, tailored SOM recommendations in seconds. Together, the two companies are redefining how electronics teams discover and select embedded solutions.

SAN JOSE, Calif., April 21, 2026 /PRNewswire-PRWeb/ — Critical Link LLC, a leader in system-on-module solutions, has introduced the world’s first AI-driven System on Module Recommendation Engine, powered by Rapidflare’s Rapid Product Selection Agent. The new engine advances Critical Link’s mission to help customers bring embedded products to market faster and more cost-effectively.

Together, Rapidflare and Critical Link are combining their strengths to make the journey from concept to product faster, smarter, and more closely aligned with customer needs. – Amber Thousand, Sr. Director of Marketing, Critical Link

In the electronics industry, selecting the right product often requires manually comparing hundreds of pages of datasheets or relying on rigid parametric search tools. Critical Link’s SOM Recommendation Engine is set to change that. With Rapidflare’s conversational AI agent, customers can describe their requirements in natural language and receive tailored recommendations in a fraction of the time.

“For years customers have asked for a better way to find the right SOM for their application. Launching this AI-driven engine with Rapidflare’s technology is a game changer,” said Amber Thousand, Sr. Director of Marketing at Critical Link. “Their accuracy, domain expertise, and speed of integration made them the clear choice to support our mission.”

Unlike generic AI agents, Rapidflare’s technology is purpose-built for complex product selection workflows. It combines knowledge graph-based reasoning, domain-specific intelligence, and industry guardrails to deliver recommendations that are both fast and reliable for electronics teams.

“The best partnerships happen when your mission aligns with your partner’s mission,” said Navanee Sundaramoorthy, CEO and Founder at Rapidflare. “We’re proud to partner with Critical Link to help make SOM product selection more seamless, intuitive, and efficient for their team and customers.”

Beyond accelerating product selection, the AI engine gives engineers a new way to engage with Critical Link. “We’ve always offered thorough documentation and product support to customers via our website, our engineering wiki, and personal contact. Adding the SOM Recommendation Engine creates a more efficient path for self-discovery, which we see as a growing trend,” said Thousand. “Together, Rapidflare and Critical Link are combining their strengths to make the journey from concept to product faster, smarter, and more closely aligned with customer needs.”

To explore Critical Link’s SOM Recommendation Engine, visit https://www.criticallink.com/som-recommendation-ai-agent/.

To learn more about Rapidflare and its AI-powered product selection solutions, visit Rapidflare’s website: https://www.rapidflare.ai/

About Rapidflare

Rapidflare builds AI-powered domain specific agents for electronics, semiconductors, and other technically complex industries. Its product intelligence powered AI platform gives teams natural-language access to product and engineering knowledge, making it easier to find accurate answers, support customers, and move faster across critical workflows. Rapidflare multiplies the impact of GTM teams by making critical technical knowledge instantly accessible, helping sales, solutions engineering, product marketing, support, and customer success teams move faster and operate with confidence. For more information, visit rapidflare.ai

About Critical Link

Critical Link designs and manufactures CPU-based, FPGA-based, and DSP-based system-on-modules (SOMs) for industrial electronic applications. Its production-ready embedded solutions help customers bring products to market faster and at lower cost by reducing development complexity, risk, and time spent building core processing subsystems from scratch. With a focus on product quality, long-term availability, lifecycle support, and close customer engagement, Critical Link serves OEMs across a wide range of industrial and technically demanding applications. For more information, visit the website: criticallink.com

Media Contact

Balpreet, Rapidflare, 1 2068614231, balpreet@rapidflare.ai, rapidflare.ai

View original content to download multimedia:https://www.prweb.com/releases/critical-link-launches-worlds-first-ai-driven-som-recommendation-engine-powered-by-rapidflare-302749279.html

SOURCE Rapidflare

Continue Reading

Technology

COMAU SHOWCASES AUTOMATION SOLUTIONS FOR SOUTHEAST ASIA’S COMMERCIAL VEHICLE INDUSTRY AT GIICOMVEC 2026

Published

19 minutes ago

on

April 22, 2026

By

SHANGHAI, April 22, 2026 /PRNewswire/ — Comau participated in the Indonesia International Commercial Vehicle Expo (GIICOMVEC 2026), held in Jakarta, where it engaged with local OEMs and supply chain partners on manufacturing upgrades and the application of automation technologies. During the event, Comau presented its capabilities in body-in-white automation, flexible production systems for multi-model manufacturing, and digital manufacturing solutions, drawing on its experience in managing complex automotive production environments.

Through its participation at GIICOMVEC 2026, Comau further expanded its engagement with the Southeast Asian market. Leveraging its global project experience and strong presence in China, Comau supports complex, high-volume automotive production for both domestic and international OEMs, and combines this experience with local insights to address evolving regional manufacturing requirements.

GIICOMVEC 2026 featured 14 leading commercial vehicle brands from multiple regions, showcasing developments in light commercial vehicles, heavy-duty trucks, buses, and specialty vehicles. As demand continues to grow and industrial modernization accelerates, Indonesia is becoming an increasingly important production base and end market for commercial vehicles in Southeast Asia. At the same time, the expanding presence of Chinese automakers is contributing to a more competitive landscape and a shifting supplier ecosystem.

In this context, manufacturers are managing broader product portfolios and short production cycles. As a result, greater emphasis is being placed on automation solutions that enable efficient multi-model production, improve consistency in body-in-white manufacturing, and support the adoption of digital production management systems.

At the policy level, initiatives such as Making Indonesia 4.0 and the national push toward vehicle electrification are reinforcing the transition toward efficient and sustainable manufacturing. Comau’s proven track record in e-Mobility and battery assembly solutions further aligns with these developments, creating new opportunities to add value across the entire commercial vehicle value chain in Southeast Asia.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/comau-showcases-automation-solutions-for-southeast-asias-commercial-vehicle-industry-at-giicomvec-2026-302748494.html

SOURCE Comau

Continue Reading

Trending