Exposures are potential exploitable entry points that can be used by an adversary to gain initial compromise into an organization or supply chain ecosystem. Examples include: vulnerable software, zero-days, stolen credentials, missing multifactor authentication, domain typosquatting, etc.