What are the riskiest technologies used in the Dutch healthcare sector? Do people still expose RDP? Is Dutch healthcare data processed inside the European Union? Z-CERT regularly scans many IPs and domains in use by the Dutch Healthcare sector. In this talk, we will share insights from performing External Attack Surface Management (EASM) on hundreds of healthcare organisations. Additionally, we share some challenges we faced and are facing in setting up scanning and reporting for potentially all NIS2-eligible healthcare organisations. Lastly, we outline our vision for a shared open source EASM solution.
