Jul 28, 2026 · 38 min · 15 segments
Discover how vulnerabilities like legacy authentication, excessive reachability, and AI-driven threats are accelerating lateral movement in organizations. This episode explores key findings from a…
Nicholas DeColaGuest
Chase CunninghamHost
Yeah, so this is an interesting report near and dear, kind of close to my heart because lateral movement I think is, I honestly don't care about the breach side of it because breaches happen like you're going to get popped.

So let me throw some of these stats out here from the executive summary because this is where it really starts to get interesting.


And 12.2% of organizations exhibit observable user-to-server administrative pathways.

We plugged everything together to make it work because the IT guy was told, make that shit work.



But yeah, I mean, just using a legacy auth is like, you know, harder for customers to turn off in the environment.

And so we see, you know, almost 50% or almost half of traffic still authenticating uses ntlm because of legacy applications i mean i've been to manufacturers that said oh i have this windows nt box on my manufacturing floor and that app still runs because it runs the manufacturing floor and we have no plans to get rid of it and that kind of stuff happens and i i get it it's tough but then how do you like take that thing and box it off in the corner so that at least uh you know when you get breach because you know soon breach like they can't actually use that in the environment fix here all right cool

So, I mean, following on to that, like I do stuff all the time looking through Shodan and other things just because, number one, I think it's fun to poke around the Internet.

Yeah, so this is an interesting report near and dear, kind of close to my heart because lateral movement I think is, I honestly don't care about the breach side of it because breaches happen like you're going to get popped.

So let me throw some of these stats out here from the executive summary because this is where it really starts to get interesting.


And 12.2% of organizations exhibit observable user-to-server administrative pathways.

We plugged everything together to make it work because the IT guy was told, make that shit work.



But yeah, I mean, just using a legacy auth is like, you know, harder for customers to turn off in the environment.

And so we see, you know, almost 50% or almost half of traffic still authenticating uses ntlm because of legacy applications i mean i've been to manufacturers that said oh i have this windows nt box on my manufacturing floor and that app still runs because it runs the manufacturing floor and we have no plans to get rid of it and that kind of stuff happens and i i get it it's tough but then how do you like take that thing and box it off in the corner so that at least uh you know when you get breach because you know soon breach like they can't actually use that in the environment fix here all right cool

So, I mean, following on to that, like I do stuff all the time looking through Shodan and other things just because, number one, I think it's fun to poke around the Internet.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.