The internet-facing assets were found to be susceptible to potential exploitation in a sample of 90 banking and financial services organisations.