Look back across history and you’ll see there has been plenty of empires, but even the longest-lasting of them still eventually came to an end. When we talk about larger businesses operating online and taking advantage of new web-based business technologies no one is going to compare any of them to empires, perhaps with the exception of Google. But to continue on that tangent briefly, there is not better example of an empire failing because it ended being spread to thin quite like the Mongol empire. The reason we mention it as our segue here to this week’s blog topic is because nowadays as businesses expand in the digital space they naturally assume more of a surface, or what you might call the ‘expanse’ of their business in Cyberspace to the extent they’ve wanted / needed to move it there. With all that expansion comes greater risk of cyber-attacks, and that leads us right into discussing attack surface management. So what is that exactly? Let us explain. An attack surface is every asset that an organization has facing the Internet that may be exploited as entry points in a cyber-attack. They could be anything from websites, subdomains, hardware, applications, to clod resources or IP addresses. Social media accounts or even vendor infrastructures can also be a part of the ‘vulnerabilities’ based on the size of your surface. All of which will be of interest to us here at 4GoodHosting as quality Canadian web hosting providers given how web hosting is very much an abutment for these businesses with the way it’s a part of the foundation for their online presence. So let’s dig further into this topic as it relates to cloud security for businesses. Rapid Expansions We only touched on the possibility for an attack surface above. They are rapidly expanding and can now include any IT asset connected to the internet, so we can add IoT devices, Kubernetes clusters, and cloud platforms to the list of potential spots where threat actors could infiltrate and initiate an attack. Having external network vulnerabilities creating an environment that can prompt a potential breach is an issue too. It’s for these reasons...
