Connect with us

Technology

40% of Environments are Vulnerable to Full Take Over, New Picus Security Report Unveils

Published

2 years ago

on

The Picus Blue Report 2024 also found, security controls for macOS endpoints only prevented 23% of simulated attacks, compared to over 60% for Windows and Linux

SAN FRANCISCO, July 30, 2024 /PRNewswire/ — Picus Security, the leading security validation company, has released The Blue Report 2024: State of Exposure Management* that revealed 40% of tested environments allowed attack paths that lead to domain admin access. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT infrastructure, and is like giving attackers a master key. The report was based on a worldwide comprehensive analysis of more than 136 million cyber attacks simulated by the Picus Security Validation Platform.

The Security Domino Effect is Concerning

The report reveals that, on average, organizations prevent 7 out of 10 of attacks, but are still at risk of major cyber incidents because of gaps in threat exposure management that can permit attackers using automation to move laterally through enterprise networks. Of all attacks simulated, only 56% were logged by organizations’ detection tools, and only 12% triggered an alert. 

“Like a cascade of falling dominoes that starts with a single push, small gaps in cybersecurity can lead to big breaches,” said Dr. Suleyman Ozarslan, Picus co-founder and VP of Picus Labs. “It’s clear that organizations are still experiencing challenges when it comes to threat exposure management and balancing priorities. Small gaps that lead to attackers obtaining domain admin access are not isolated incidents, they are widespread. Last year, the attack on MGM used domain admin privileges and super admin accounts. It stopped slot machines, shut down virtually all systems, and blocked a multi-billion-dollar company from doing business for days.” 

Well over a third (40%) of environments have weaknesses that allow attackers with initial access to a network to achieve domain admin privileges. Once they have these privileges they can manage user accounts or modify security settings. A compromised domain admin account can lead to full control of the network, allowing attackers to conduct data exfiltration, deploy malware, or disrupt business operations.

macOS EDR Misconfigurations Lead to Vulnerabilities

The Blue Report 2024 also highlights that macOS endpoints are far more likely to be misconfigured or allowed to operate without Endpoint Detection and Response (EDR). macOS endpoints only prevented 23% of simulated attacks, compared to 62% and 65% for Windows and Linux. This highlights a potential gap in IT and security team skill sets and approach in securing macOS environments.

“While we have found Macs are less vulnerable to start, the reality today is that security teams are not putting adequate resources into securing macOS systems,” said Volkan Ertürk, Picus Security Co-Founder and CTO. “Our recent Blue Report research shows that security teams need to validate their macOS systems to surface configuration issues. Threat repositories, like the Picus Threat Library, are armed with the latest and most prominent macOS specific threats to help organizations streamline their validation and mitigation efforts. 

The Blue Report 2024 helps security teams benchmark their performance against peers and identify areas for improvement. Additional key findings include:

Common language passwords: 25% of companies use passwords that are words commonly found in the dictionary. This means that it is easy for attackers to crack hashed passwords and obtain cleartext credentials.Organizations only prevent 9% of data exfiltration techniques used by attackers. Data exfiltration is used to steal sensitive data and is commonly used in ransomware attacks.BlackByte, the most challenging ransomware group for organizations to defend against, is prevented by just 17% of organizations, followed by BabLock (20%) and Hive (30%).

For more information: 

Download the Picus Blue Report 2024Read the Blue Report 2024 blogBlue Report 2024 Media Kit

*Methodology:

The findings in this report are based on the results of simulated attack scenarios executed by Picus Security customers from January to June 2024. The data has been anonymized and aggregated from 136 million attack simulations. Research and analysis was completed by Picus Labs, the research team of Picus Security.

About Picus Security

Picus Security, the leading security validation company, gives organizations their validated risk level and pinpoints critical gaps. Picus Security Validation Platform transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on high-impact fixes. The Picus Exposure Data Fabric and Numi AI™ help security teams understand their risk and prioritize a short-list worth pursuing. 

The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing. Picus Security also has a willingness to recommend percentage of  95% in the 2024 Gartner® Peer Insights™ Voice of the Customer for Breach and Attack Simulation Tools**.

** Gartner, Voice of the Customer for Breach and Attack Simulation Tools, Peer Contributors, 30 January 2024 

GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

Logo: https://mma.prnewswire.com/media/2183222/4835187/Picus_Logo.jpg

View original content:https://www.prnewswire.co.uk/news-releases/40-of-environments-are-vulnerable-to-full-take-over-new-picus-security-report-unveils-302209716.html

Related Topics:
Continue Reading

Technology

Hexaware Hosts Greater Manchester and West Yorkshire Mayoral Delegation, Deepens Partnership with University of Leeds

Published

38 minutes ago

on

October 23, 2026

By

Part of the Great North Mayoral Delegation’s visit to India, discussions focused on Hexaware’s UK expansion and planned R&D centers in Leeds and Manchester

MUMBAI, India, Oct. 23, 2026 /PRNewswire/ — Hexaware Technologies (NSE: HEXT), an AI-first digital and IT services company, hosted a delegation led by Tracy Brabin, Mayor of West Yorkshire, and Bev Craig, Mayor of Greater Manchester, as part of The Great North’s first joint mayoral-led trade mission to India

Hexaware met with Tracy Brabin and delegates from West Yorkshire at its Mumbai office to discuss the company’s UK investment plans, regional employment, and opportunities for technology collaboration across the North of England.

During the visit, Hexaware and the University of Leeds discussed their agreement to strengthen industry–academic collaboration through research, knowledge sharing, and experiential learning opportunities for students.

Earlier in the mission, on October 14 in Bengaluru, Hexaware leaders met Bev Craig, Mayor of Greater Manchester, together with representatives of the British Deputy High Commission and the Invest Manchester team, to discuss Hexaware’s investment in the city region.

Hexaware announced that it will create hundreds of jobs and invest £9 million in a new Design and Innovation Centre at Manchester’s innovation district, SISTER, delivered in collaboration with the University of Manchester. By establishing a base at SISTER, Hexaware will have access to Europe’s largest clinical academic campus on Manchester’s Oxford Road Corridor and a rapidly expanding digital and tech ecosystem within the city.

The visits follow Hexaware’s June 2026 announcement of a £25 million UK expansion, expected to create approximately 1,200 jobs over three to five years across Manchester, Leeds, and Birmingham, including 420 in Manchester and 240 in Leeds. Plans include proposed R&D centers in Manchester and Leeds, with Newcastle also under consideration as a potential future location, given the region’s strong university talent pool and proximity to Scotland.

Parameshwaran Iyer, Executive Vice President & Head – Europe, Hexaware, said, “The North of England is an important part of our UK growth plans. Our investment goes into developing technology capabilities and recruiting graduates from the region’s universities, training them to work with enterprise and public-sector customers. Our new agreement with the University of Leeds will strengthen this pipeline, giving us closer access to graduate talent as we grow our presence in the region. We see considerable potential in the talent and expertise available across these cities.”

Bev Craig, Mayor of Greater Manchester, said, “Greater Manchester has established strengths in healthcare, life sciences, and AI, supported by close cooperation between universities, researchers, and industry. We welcome Hexaware’s plans for Manchester and the opportunities they present for investment, innovation, and employment in these sectors.”

Tracy Brabin, Mayor of West Yorkshire, said, “It was great to visit Hexaware’s headquarters in Mumbai and hear first-hand about the company’s ambitious plans for growth in the UK. Their investment in Leeds and the creation of hundreds of new jobs is fantastic news for West Yorkshire and a strong vote of confidence in our region. Trade missions like this give us the opportunity to meet decision-makers directly, strengthen international relationships and explore how businesses like Hexaware can deepen their links with West Yorkshire to create a stronger, better-off region that works for all.” 

Glenn McCauley, Head of Proposition Development at the University of Leeds, said, “We were delighted to join this Great North Mayoral Delegation to India and to discuss with Hexaware leadership and with the Mayor of West Yorkshire how the University of Leeds’ agreement with Hexaware can be a catalyst to drive economic growth in our region.”

India and the North of England are connected above all through people, with more than 81,000 people of Indian heritage living in Yorkshire and the Humber, and 50,000 people of Indian diaspora in Greater Manchester. Thousands of Indian students also choose universities in the two regions every year. Increasingly, Indian companies are also among the region’s investors and employers. The India–UK Comprehensive Economic and Trade Agreement (CETA), in force since July 2026, alongside The Great North’s investment initiatives, gives that relationship fresh momentum.

Hexaware will continue discussions with regional partners on its proposed R&D facilities, graduate recruitment, and technology partnerships across the North of England, drawing on Leeds’ strengths in digital engineering, data science, robotics, fintech, and technology-enabled care, and Manchester’s strengths in healthcare, life sciences, cyber, and AI.

About Hexaware

Hexaware is a global technology and business process services company. Every day, Hexawarians wake up with a singular purpose: to create smiles through great people and technology. With offices across the world, we empower enterprises worldwide to realize digital transformation at scale and speed by partnering with them to build, transform, run, and optimize their technology and business processes. Learn more about Hexaware at https://hexaware.com.

 

View original content to download multimedia:https://www.prnewswire.com/in/news-releases/hexaware-hosts-greater-manchester-and-west-yorkshire-mayoral-delegation-deepens-partnership-with-university-of-leeds-302917888.html

Continue Reading

Technology

Fosun Wealth Opens Its First Private Wealth Center in Hong Kong at Harbour City, Tsim Sha Tsui

Published

38 minutes ago

on

October 23, 2026

By

Appointment-Only Center for High-Net-Worth Clients, Partnering with Fosun Wealth IFA to Expand Wealth Management Capabilities

HONG KONG, Oct. 23, 2026 /PRNewswire/ — Fosun Wealth International Holdings Limited (“Fosun Wealth”) announced the official opening of its first Private Wealth Center on the 23rd floor of Prudential Tower, at The Gateway, Harbour City, Tsim Sha Tsui, Hong Kong. The center provides a dedicated offline space for meetings and wealth planning in Hong Kong, exclusively tailored for high-net-worth clients. Visits are by appointment only, and the center operates in partnership with Fosun Wealth IFA (Independent Financial Advisor), supporting clients from initial discussions and tailored proposals through to signing and implementation.

The opening ceremony, themed “A Starry New Chapter on Victoria Harbour”, brought together business partners from fund, asset management and insurance industries in Hong Kong to celebrate the occasion.

Expanding amid Industry Growth to Address Clients’ Demand for Long-Term Advice

The opening comes as Hong Kong’s wealth management sector continues to expand. According to the Securities and Futures Commission of Hong Kong, as of the end of 2025, total assets under management (AUM) in Hong Kong jumped 20% year-on-year (YoY) to a record high of HK$42.2 trillion. Among the major segments, AUM of private banking and private wealth management business increased by an impressive 24% YoY to HK$12.9 trillion. At the same time, client expectations have shifted. High-net-worth individuals are increasingly looking beyond fragmented, one-off product recommendations and seeking professional institutions that can deliver cross-market and multi-generational support over the long term.

The center’s location in Harbour City offers views across Victoria Harbour and a calm, private setting. It features four dedicated meeting rooms, with each client received by a relationship manager throughout their visit to allow for in-depth discussions in a confidential environment. In addition to client meetings and document signing, the center will also host smaller, focused sessions to help clients better capture opportunities in Hong Kong’s wealth management market.

Strengthening Collaboration with Fosun Wealth IFA to Enrich Service Matrix

The Private Wealth Center will also serve as a working base for Fosun Wealth IFA, supporting professional discussions and the review of more complex cases. Launched by Fosun Wealth in 2025, Fosun Wealth IFA is Hong Kong’s first one-stop platform for independent financial advisors (IFAs) to establish and grow their practices. It has already built a team of nearly 500 advisors. Built on a compliant licensing framework, the platform integrates diversified financial products, AI-powered tools and structured trainings, supporting advisors from licensing through ongoing professional development to independent practice. The goal is to help raise standards and professionalism across Hong Kong IFA industry.

Fosun Wealth subsidiaries hold securities and insurance brokerage licenses. Under strict compliance, they provide access to insurance, securities, asset management, and corporate financing services. Fosun Wealth has also established partnerships with numerous leading fund houses, asset managers, and insurers, supporting both the Private Wealth Center and the IFA platform.

Cheng Kang, CEO of Fosun Wealth, said: “Hong Kong continues to strengthen its position as an international hub for asset and wealth management, supported by its resilience and openness. This creates a valuable opportunity for us to deepen our presence in the local market. The opening of the Private Wealth Center is more than the launch of a new location—it marks a new chapter in Fosun Wealth’s commitment to serving high-net-worth clients in Hong Kong with a more personal, long-term approach, bringing our ‘warm private wealth stewardship’ to a broader client base. Whether we are serving high-net-worth clients or building a stronger ecosystem for financial advisers, we aim to set a high standard in Hong Kong’s wealth management industry. We will focus on turning our capabilities into lasting value for clients, and work with clients and partners to support the continued growth of the sector.”

About Fosun Wealth International Holdings Limited

Fosun Wealth International Holdings Limited (hereinafter referred to as “Fosun Wealth”) is an AI-driven global one-stop Web5(Web2+Web3) wealth management platform wholly owned by Fosun International Limited (stock code: 656.HK) in Hong Kong. With its solid financial position, Fosun Wealth has obtained various licenses via its subsidiaries, including Type 1, 2, 4, 6, and 9 licenses granted by the Securities and Futures Commission(SFC) of Hong Kong, and an insurance broker license granted by the Insurance Authority(IA) of Hong Kong. Fosun International Securities Limited, a subsidiary of Fosun Wealth, is one of the first batch of brokerages to provide virtual asset dealing service. Fosun Wealth has launched several industry-leading brands, including the Fosun Wealth App, Finloop, FinChain, and Fosun Wealth IFA. For more information, please visit: www.fosunwealth.com.

View original content:https://www.prnewswire.com/apac/news-releases/fosun-wealth-opens-its-first-private-wealth-center-in-hong-kong-at-harbour-city-tsim-sha-tsui-302917889.html

SOURCE Fosun Wealth International Holdings Limited

Continue Reading

Technology

WOLFX Student Super App Reaches 104 Universities One Month After US Launch

Published

38 minutes ago

on

October 23, 2026

By

All-in-one college platform reports 300 percent subscription growth following Arizona campaign 

MELBOURNE, Australia, Oct. 23, 2026 /PRNewswire/ — WOLFX, an all-in-one app designed to help college students thrive academically, socially and financially, has been downloaded by students at 104 universities in 130 cities across the US just one month after its launch in Indiana.

The platform recorded a 300 percent increase in subscriptions following its Rush WOLFX campaign in Arizona. Rush WOLFX is a game of skill that involves college fraternities and sororities putting their business skills to the test to win a $10K prize. 

WOLFX plans to hold six additional Rush competitions at Universities across the country next month.

WOLFX brings together AI-powered study tools, wellness support, a student marketplace and opportunities for student entrepreneurs in a single app, giving students who juggle academic, social and financial pressures one place to manage college life.

“I developed WOLFX to make the lives of college kids better. To see the app being so well received across America gives everyone involved a huge boost,” said Simon Bishop, founder of WOLFX. “As a father, I know college can be a daunting time for students and parents. WOLFX is aimed at easing those fears of loneliness and isolation. I’m so happy WOLFX is making a difference.”

Students say the app is already part of their daily routine.

“This is honestly the only college app you’ll ever need,” said Katie Wolf, a cheerleader at Indiana University. “Whether it’s managing my schedule, working on a business idea or even selling some items on the student marketplace, WOLFX has me covered. This app is a game changer for college students.”

WOLFX Platinum is available for $28.99 per month. WOLFX can be downloaded on iOS and Android.

About WOLFX

WOLFX is a student-focused super app designed to help college students navigate campus life through AI-powered study tools, wellness support, a student marketplace and entrepreneurial opportunities. The platform aims to make college life more connected, manageable and rewarding. WOLFX is available on iOS and Android. Learn more at https://wolfxapp.com/.

View original content to download multimedia:https://www.prnewswire.com/news-releases/wolfx-student-super-app-reaches-104-universities-one-month-after-us-launch-302917619.html

SOURCE WOLFX

Continue Reading

Trending