What 345 Days of Untested Exposure Looks Like at a Bank

This article details a significant security vulnerability stemming from a bank’s reliance on an annual penetration testing schedule, highlighting the risks associated with infrequent assessments. A VPN vulnerability, exploited due to a 345-day gap between tests, allowed an attacker to access sensitive data from over se…