The state of cyber security in Australia and NZ through the lens of 2,500 penetration tests

Over the span of a year, CyberCX's penetration testing team performed over 2,500 engagements for more than 800 customers, providing over 26,000 individual findings. Generated by a workforce concentrated in Australia and New Zealand, this dataset provides a unique insight into the state of security of our region.

This presentation draws insights from the analysis of this dataset, answering questions like:

Are there common high-risk issues with simple fixes that organisations could prioritise to rapidly uplift their security?

How do the results from penetration testing activities compare with what Cyber Intel tells us about the Tactics, Techniques and Procedures used by real-world attackers?

What do penetration tests tell us, and what do they not tell us? How can we fill in the gaps?