security1 publisher
Microsoft maps stale DNS and commit rights into one cloud web app attack surface
The new cloud web applications threat matrix sorts eleven ATT&CK tactics for managed runtimes and serverless code, starting with assets an app team rarely owns, such as dead DNS records and linked source repositories.
Publishers:microsoft.com
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap+6
- Incentives58
- Confidence67