Threat Vector by Palo Alto Networks Don't Leave Them to Their Own Devices
7 snips
Oct 30, 2025 Asher Davila, Principal Security Researcher at Palo Alto Networks, dives deep into the alarming findings from the 2025 Device Security Enterprise Threat Report. Over 21% of connected devices have known vulnerabilities, with 32.5% unmanaged, creating serious security blind spots. He discusses common oversight with personal devices and the challenges posed by credential-based attacks. Asher emphasizes the importance of effective asset lifecycle governance and why zero trust approaches are hindered by management gaps. Proactive defenses are crucial for breaking the attack chain.
AI Snips
Chapters
Transcript
Episode notes
Device Diversity Creates Visibility Gaps
- Large organizations average ~80 device types, creating complex inventory and visibility challenges.
- Diversity of OSes, versions, and BYOD multiplies blind spots for administrators.
Focus On Common Blind-Spot Devices
- Watch for smartphones, tablets, IP cameras, DVRs and VMs as common visibility blind spots.
- Harden access, disable unused services, and apply segmentation or firewalls for these devices.
Why Many AD Devices Lack EDR
- About 39% of IT devices in Active Directory lack EDR/XDR coverage due to OS incompatibility, budget limits, and forgotten test servers.
- These gaps create persistent blind spots that attackers can exploit.