The Invisible Attack Surface — Everything Attackers Know Before They Ever Touch Your Network