So I have worked in Security my whole career. I worked in Vulnerability Management/penetration testing for a top Finicial Service company as well.
To give you a bit of background, my job was to find vulnerabilities in our companies network (both internally and externally) and I would assist in remediating them. You ALWAYS make sure anything that touches the internet is squeaky clean.
From the what I saw, if I had ever opened a server to the internet with the number of vulnerabilities these servers had (and these vulnerabilities were CRITICAL severity) i would be immediately fired.
So I have worked in Security my whole career. I worked in Vulnerability Management/penetration testing for a top Finicial Service company as well.
To give you a bit of background, my job was to find vulnerabilities in our companies network (both internally and externally) and I would assist in remediating them. You ALWAYS make sure anything that touches the internet is squeaky clean.
From the what I saw, if I had ever opened a server to the internet with the number of vulnerabilities these servers had (and these vulnerabilities were CRITICAL severity) i would be immediately fired.