SECTOR BULLETIN // CHIMERASCOPE FYI

DACH Defense & Aerospace — External Security Posture

Sector-wide security assessment across the dach defense & aerospace sector.

25 October 2026

NIS2 Art.21CRA Art.10BSI-Gesetz

Defense sector classified as essential entity under NIS2.

KEY FINDING
91.5%
of domains allowing unauthorized certificate issuance

Risk Distribution

CRITICAL
6.8%
HIGH
15.3%
MEDIUM
30.5%
LOW
47.5%
Avg risk score: 25.4Max: 93

Sector Threat Landscape

5 threat groups identified targeting this sector · 5 monitored by federal cybersecurity agencies

Charming KittenIR
APT17CN
CleaverIR
APT28RU
APT40CN

Attribution based on publicly available government and community threat intelligence.

Request sector-specific threat assessment →

Web Application Protection
37.3%
Vulnerable to Content Injection
44.1%
Server Fingerprint Exposed

Missing security headers expose web applications to clickjacking, injection, and man-in-the-middle attacks.

Email Spoofing Protection
15.3%
Vulnerable to Email Impersonation
11.9%
Sender Identity Unverified
10.2%
No Email Authentication

Organizations without proper email authentication controls allow attackers to impersonate their domain — enabling phishing campaigns and business email compromise.

DNS & Domain Security
83.1%
Domain Resolution Unprotected
91.5%
Unauthorized Certificate Issuance Possible
33.9%
Unencrypted Access Possible

Unprotected domain infrastructure allows attackers to intercept resolution and issue unauthorized certificates — redirecting customers to attacker-controlled systems.

Encryption & Disclosure Readiness
66.1%
Modern Encryption Adopted
6.8%
Coordinated Disclosure Program
6.8%
Session Token Exposure Risk

Modern encryption standards and coordinated disclosure programs demonstrate security maturity. Weak session management exposes user credentials to interception.

Unauthorized Access Vectors
8.5%
Unencrypted File Transfer Open
8.5%
Remote Desktop Accessible
8.5%
Mail Server Directly Accessible
8.5%
Database Port Accessible

Exposed administrative interfaces provide direct attack vectors for unauthorized access and lateral movement across internal systems.

Technology Maturity
28.8%
CDN Protected
20.3%
Management Panel Accessible
5.1%
Self-Signed Certificate
1.7%
End-of-Life Software

Modern infrastructure investment correlates with lower breach probability. Exposed administration panels and legacy software create easily exploitable entry points.

Certificate & Vulnerability Management
13.6%
Expiring <30d
1.7%
Known Exploitable Vulnerabilities

Expired or expiring certificates cause service disruptions and reduce trust. Known CVEs indicate unpatched, exploitable vulnerabilities.

Infrastructure
Overview
CDN Adoption28.8%
Avg Domain Age25y
Datacenter / Cloud56.6%
VPN / Proxy Fronted11.3%
Top Provider Share11.9%
Mail Provider
Self-hosted
27.1%
Third-party
20.3%
Microsoft 365
20.3%
Proofpoint
15.3%
Hosting
Other / Self-hosted
42.4%
CLOUDFLARENET
11.9%
INCAPSULA
8.5%
AMAZON-02
8.5%
SSL Issuers
Other
23.7%
DigiCert
20.3%
GlobalSign
15.3%
Let's
15.3%
Google
10.2%
Methodology

Based on passive reconnaissance of publicly available data. Our Intelligence Platform assessed organizations in this sector using automated multi-phase analysis across 18 security dimensions. No intrusive testing was performed.

Request Intelligence Assessment

Submit your details and include your organization's primary domain. We will deliver a sector-specific intelligence briefing.