Active signals
29
6 resolved
Cyber overlay
Active signals feed each entity's cyber exposure factor in the annual priority score; every number traces to signal records.
Active signals
29
6 resolved
Critical / high
20
of active signals
Exploited in the wild
2
active signals
Internet exposed
9
active signals
Entities affected
18
of 30 in universe
Entities with active signals, ranked by their cyber exposure score factor.
| Entity | Critical | High | Moderate | Low | Exploited | Cyber exposure score |
|---|---|---|---|---|---|---|
| Digital Onboarding Journey 2 active signals | 1 | 1 | – | – | 1 | 86 |
| Cloud Infrastructure Program 3 active signals | 1 | 2 | – | – | – | 83 |
| Enterprise IAM Platform 2 active signals | 1 | 1 | – | – | 1 | 78 |
| Customer Data Domain 3 active signals | 1 | 1 | 1 | – | – | 65 |
| Mobile Banking App 2 active signals | – | 1 | 1 | – | – | 46 |
| Core Banking Platform 2 active signals | – | 2 | – | – | – | 40 |
| Generative AI Knowledge Assistant 2 active signals | – | 1 | 1 | – | – | 30 |
| Managed Security Services Provider 2 active signals | – | 1 | 1 | – | – | 30 |
| Enterprise Data Warehouse 2 active signals | – | 1 | 1 | – | – | 30 |
| HR Information System 1 active signal | – | 1 | – | – | – | 28 |
| Loan Origination System 1 active signal | – | 1 | – | – | – | 28 |
| Payment Operations 1 active signal | – | 1 | – | – | – | 20 |
| Credit Decisioning Model 1 active signal | – | 1 | – | – | – | 20 |
| ATM Fleet Operations 1 active signal | – | 1 | – | – | – | 20 |
| Cloud Email & Collaboration Suite 1 active signal | – | – | 1 | – | – | 18 |
| Fraud Detection Model 1 active signal | – | – | 1 | – | – | 10 |
| Data Center Operations 1 active signal | – | – | 1 | – | – | 10 |
| AML Transaction Monitoring 1 active signal | – | – | 1 | – | – | 10 |
| Signal | Entity | Type | Severity | Detected | Status | Score points |
|---|---|---|---|---|---|---|
Deprecated API endpoint reachable externally Attack Surface Monitor · internet exposed | Mobile Banking App | external exposure | MODERATE | 2026-05-18 | Active | +18 |
External sharing links to sensitive folders DLP · internet exposed | Cloud Email & Collaboration Suite | data risk | MODERATE | 2026-05-09 | Active | +18 |
Prompt logs retained without classification Data Discovery |
| data risk |
| MODERATE |
| 2026-04-22 |
| Active |
| +10 |
Fraud model drift monitoring alert thresholds unreviewed AI Governance Register | Fraud Detection Model | ai governance gap | MODERATE | 2026-03-30 | Active | +10 |
NIST Privacy Framework consent controls partially implemented Compliance Mapper | Customer Data Domain | framework gap | MODERATE | 2026-03-19 | Active | +10 |
Shared analyst accounts in warehouse environment Identity Analytics | Enterprise Data Warehouse | iam weakness | MODERATE | 2026-03-08 | Active | +10 |
Monitoring scenario library below peer coverage baseline Compliance Mapper | AML Transaction Monitoring | framework gap | MODERATE | 2026-02-25 | Active | +10 |
MSSP contract lacks NIST CSF detection coverage mapping Compliance Mapper | Managed Security Services Provider | framework gap | MODERATE | 2026-02-08 | Active | +10 |
End-of-life network switches in server hall Asset Inventory | Data Center Operations | vuln | MODERATE | 2026-01-30 | Active | +10 |
CVE-2026-0233 in collaboration suite plugin Vulnerability Scanner · internet exposed | Cloud Email & Collaboration Suite | cve | MODERATE | 2026-02-19 | Resolved · 2026-03-12 | 0 |
Model training extracts stored beyond retention window Data Discovery | Fraud Detection Model | data risk | MODERATE | 2026-02-11 | Resolved · 2026-05-01 | 0 |
CVE-2025-9981 in core scheduler component Vulnerability Scanner | Core Banking Platform | cve | MODERATE | 2026-01-20 | Resolved · 2026-03-05 | 0 |
Wire process fraud controls below FFIEC baseline mapping Compliance Mapper | Wire Transfer Processing | framework gap | MODERATE | 2026-01-12 | Resolved · 2026-04-20 | 0 |