Why CISOs Need a New Approach to Enhance Attack Surface Visibility