CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

HackerOne CISO Chris Evans argues M&A due diligence often misses inherited security risk: survey data shows organizations defend only 63% of their attack surface, so acquisitions can import a 37% gap.