Palo Alto, California, November 2nd / PRNewswire / -- Building effective, autonomous, and secure AI native network security companies, Armadin today released " Opportunity Intelligence : Reducing Exposure to Adversaries", which is its first study on the aspects in which global enterprises are vulnerable to attacks. The research findings come from Armadin's agentic attacks conducted throughout 2026 on production systems of global enterprises across nearly ten industries.
Most threat intelligence records what the adversary does after causing damage. This study takes a different approach: it records what the adversary is actually able to access in a specific environment and verifies this through attacks. Armadin refers to this as “opportunity data” ( opportunity data ), and based on this, it forms “opportunity intelligence” ( opportunity intelligence ). Threats require an adversary with the capability and intent, as well as an opportunity to carry out the attack. Opportunity is the only condition among these three that is within the control of the organization itself, yet research results show that most organizations are not aware of how many opportunities they have exposed themselves to. In the agentic era, understanding what opportunities attackers have to exploit an organization is key to taking action before an attack occurs.
The main findings are as follows:
- 96% of customers have at least one critical finding. Critical findings represent a direct and immediate threat to the organization and require urgent remediation.
- 88% of the critical and high-risk findings related to Armadin cannot be identified through existing intelligence sources. Most of these issues exist in software written by customers themselves, products deployed in ways not described in relevant notifications, or in zero-day vulnerabilities that have not yet been discovered.
- 71% of the credentials used for kill and chain are from non-human entities. Most of these credentials are stored in a readable format, and organizations have inadvertently exposed them.
- Nearly 70% of serious findings can be accessed by people without accounts, and most of the recorded kill chain start in an unauthenticated state. More than half of these kill chain ultimately lead to Armadin obtaining sensitive data, managing control rights, or both.
- 93% of serious issues can be mitigated without the need for third-party cooperation, and 49% do not require modification to the application code. This means that almost all identified vulnerabilities can be directly addressed by the organization, with the time required for repair mainly depending on the organization's own capabilities.
Armadin It is recommended that organizations determine the priority of repairs based on actual exposure measurements in their own environments, rather than relying on public data from others. The company also suggests managing service account credentials with the same strict standards as personnel accounts, and ensuring that configuration changes go through an approval process that is faster than code releases. Research shows that 43% of serious issues can be resolved by modifying settings or policies.
Armadin CEO Kevin Mandia stated: "Opportunity intelligence can tell you where attackers might enter before they take action. For decades, our industry has been setting defenses based on what has happened to others. Now, we can get ahead of attackers by eliminating their opportunities. The good news is that our remediation guidelines have found that 93% of serious vulnerabilities are within the control of the organizations themselves and can be fixed."
Armadin Chief Offensive Security Officer and Founder Evan Pe said, "Attackers don't look at your vulnerability information flow; they focus on what actually exists in front of them. That's exactly what this research measures. We attacked a real production environment just like our opponents would, and we found that most of the attack paths started without any login and proceeded using residual credentials from the application." CVE These details are not displayed in the database, but they become apparent during an attack.
Armadin assesses that as AI reduces the cost of finding attack paths, the proportion of exposed vulnerabilities that are converted into actual intrusions is expected to increase over the next 12 months. At the same time, these same tools also reduce the cost for defenders in assessing their own environments, so the speed of repair will become a differentiating factor among various organizations.
For the complete research and guidance for defenders, please refer to: https :// armadin.com / opportunity-intelligence-research
About Armadin
Armadin is a AI native cybersecurity company that provides authoritative offensive security platforms for identifying and eliminating risks that can be exploited by organizations. As the threats driven by AI attacks escalate, Armadin helps enterprises proactively protect their own environments. Armadin's platform offers the most comprehensive and powerful AI Hyperattacks in a secure manner, identifying new and unprecedented attack vectors before adversaries can take advantage of them. The company is led by CEO Kevin Mandia, and its team consists of engineers, researchers, and hackers, with the mission of creating effective autonomous security.
For more information, please visit www.armadin.com.
Media Contact
Armadin | Kristy Campbell | [ email protected ]
SOURCE Armadin
