A new subdomain can create a new perimeter
Every new subdomain is another place your organisation is reachable, created by whoever needed it that afternoon.
Marketing campaigns, demo environments, supplier integrations. Each gets a name, points somewhere, and frequently never appears on any inventory. They carry your brand and your certificate, so from the outside they are indistinguishable from anything else you run, which is exactly the property an attacker wants.
More on Attack surface management
- The Internet sees what you expose, not what your CMDB remembersCounted three. Answering six
- Shadow IT becomes shadow attack surfaceDoors around the back
- Acquisitions merge attack surfaces before inventoriesThe wire arrives first
- Internet exposure is a property that changesThe tide does not read your map
- A forgotten test system can be a production entry pointThe shed is still joined to the house
- Third-party hosted assets still carry your nameTheir building, your name over the door