Editorial & Advertiser disclosure

Global Banking & Finance Review® is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Home > Business > RiskIQ maps the anatomy of a corporate attack surface

RiskIQ maps the anatomy of a corporate attack surface

Published by Gbaf News

Posted on July 13, 2018

6 min read

Last updated: January 21, 2026

Belgium's new PM Bart De Wever addressing EU regulatory policies - Global Banking & Finance Review — Belgium's Prime Minister Bart De Wever speaks on reducing EU regulatory fervor and strengthening NATO ties. His leadership marks a shift in Belgium's political landscape, focusing on corporate competitiveness.

New report details five ways hackers are cashing in on organisations’ lack of visibility into their internet presence

RiskIQ, the global leader in digital threat management, today released a report mining the company’s massive repository of internet data. The report maps the global internet attack surface over a two-week period, and in the process, reveals the true extent of the modern corporate attack surface.

The report, ‘The anatomy of an attack surface: Five ways hackers are cashing in’ is a data-driven exploration of five different approaches hackers take to target businesses via the internet. They capitalise on the weakening of the corporate perimeter due to customer and partner interactions moving online. The report is based on data collected by RiskIQ’s web-crawling infrastructure, which each day executes and analyses more than two billion HTTP requests, takes in terabytes of passive DNS data, collects millions of SSL Certificates, and monitors millions of mobile apps. When viewed as a whole, this data gives a new perspective of the sheer number of digital assets exposed to the internet, any of which could become a target for hackers.

“Today, organisations are responsible for defending their network all the way to the edges of the internet,” said Lou Manousos, RiskIQ CEO. “Bringing the massive scope of an organisation’s attack surface into focus helps frame the challenges faced by organisations in keeping their employees, customers, and brand safe.”

By showing what their organisation looks like from an attacker’s perspective—a collection of digital assets that are discoverable by hackers—the report illustrates that today’s security teams are not only responsible for their own network, but also everything that targets their brand and assets on the open internet. When brands understand what they look like from the outside-in, they can begin developing a digital threat management program that allows them to discover everything associated with their organisation on the internet, both legitimate and malicious.

Report highlights include:

The Global Attack Surface is much bigger than you think: RiskIQ observed 3,495,267 new domains (249,662 per day) and 77,252,098 new hosts (5,518,007 per day) across the internet over a two week period, each representing a possible target for threat actors.
Sometimes hackers know more about your attack surface than you do: Looking at the attack surfaces of FT30 companies, each organisation had on average 120 websites with a potential critical Vulnerability or Exposure (CVE) and 228 websites with a potential high CVE.
The hidden attack surface: Hackers don’t have to compromise your assets to attack your organisation or your customers: In Q1 2018, RiskIQ identified 26,671 phishing domains impersonating 299 unique brands
The mobile attack surface: You have much more to worry about than just the Apple and Google Play mobile app stores: RiskIQ discovered 21,948 blacklisted mobile apps across 120 mobile app stores and the open internet.
Cryptocurrency Miners are the latest attack surface compromise: RiskIQ found 50,000+ websites have been observed running Coinhive in the past year.

To view the rest of these stats, download the report here:https://www.riskiq.com/research/anatomy-of-an-attack-surface/?alt=1&utm_campaign=anatomy_attack_surface&utm_source=pr&utm_medium=website&utm_content=attack_surface_resource_pr

New report details five ways hackers are cashing in on organisations’ lack of visibility into their internet presence

RiskIQ, the global leader in digital threat management, today released a report mining the company’s massive repository of internet data. The report maps the global internet attack surface over a two-week period, and in the process, reveals the true extent of the modern corporate attack surface.

The report, ‘The anatomy of an attack surface: Five ways hackers are cashing in’ is a data-driven exploration of five different approaches hackers take to target businesses via the internet. They capitalise on the weakening of the corporate perimeter due to customer and partner interactions moving online. The report is based on data collected by RiskIQ’s web-crawling infrastructure, which each day executes and analyses more than two billion HTTP requests, takes in terabytes of passive DNS data, collects millions of SSL Certificates, and monitors millions of mobile apps. When viewed as a whole, this data gives a new perspective of the sheer number of digital assets exposed to the internet, any of which could become a target for hackers.

“Today, organisations are responsible for defending their network all the way to the edges of the internet,” said Lou Manousos, RiskIQ CEO. “Bringing the massive scope of an organisation’s attack surface into focus helps frame the challenges faced by organisations in keeping their employees, customers, and brand safe.”

By showing what their organisation looks like from an attacker’s perspective—a collection of digital assets that are discoverable by hackers—the report illustrates that today’s security teams are not only responsible for their own network, but also everything that targets their brand and assets on the open internet. When brands understand what they look like from the outside-in, they can begin developing a digital threat management program that allows them to discover everything associated with their organisation on the internet, both legitimate and malicious.

Report highlights include:

The Global Attack Surface is much bigger than you think: RiskIQ observed 3,495,267 new domains (249,662 per day) and 77,252,098 new hosts (5,518,007 per day) across the internet over a two week period, each representing a possible target for threat actors.
Sometimes hackers know more about your attack surface than you do: Looking at the attack surfaces of FT30 companies, each organisation had on average 120 websites with a potential critical Vulnerability or Exposure (CVE) and 228 websites with a potential high CVE.
The hidden attack surface: Hackers don’t have to compromise your assets to attack your organisation or your customers: In Q1 2018, RiskIQ identified 26,671 phishing domains impersonating 299 unique brands
The mobile attack surface: You have much more to worry about than just the Apple and Google Play mobile app stores: RiskIQ discovered 21,948 blacklisted mobile apps across 120 mobile app stores and the open internet.
Cryptocurrency Miners are the latest attack surface compromise: RiskIQ found 50,000+ websites have been observed running Coinhive in the past year.

To view the rest of these stats, download the report here:https://www.riskiq.com/research/anatomy-of-an-attack-surface/?alt=1&utm_campaign=anatomy_attack_surface&utm_source=pr&utm_medium=website&utm_content=attack_surface_resource_pr