simulation · twin build 2026.08.27
Digital Twin
A behavioural replica of the estate. Compromise probabilities are simulated across 40,000 propagation runs; select an attack path to trace it, or open a node for control detail.
traced path · AP-118
SecurePay → Card Vault
simulated87%
traced path
network
identity / trust
likelihood
87%
time to impact
9h median dwell
hops
3
- 1Exploit Public-Facing ApplicationT1190no detection
Deserialization RCE against SecurePay Gateway 7.4.2 (CVE-2026-48217).
- 2Valid AccountsT1078partial
Reuse of gateway service-account credentials cached on the host.
- 3Lateral Tool TransferT1570partial
Movement into NS-PAY-CLUSTER-01 across the unsegmented PCI VLAN.
- 4Data from Information RepositoriesT1213covered
Bulk detokenisation requests to the PCI Card Vault.
enumerated paths
Attack paths to crown jewels
estate inventory