Scan

BLOG

Cybersecurity insights.

Technical analysis of exposure management, written by the people who work on attack surface every day.

See all tags (53)
ASM9 CTEM8 Cybersecurity5 prioritization5 attack surface5 Attack Surface Management3 Risk Management3 Vulnerabilities3 ransomware2 Cybersecurity2 Shadow IT2 TPRM2 exploitability2 exposure management2 preemptive2 incident response2 third-party risk2 validation2 AEV1 Cyber Threats1 BACEN1 CISO1 CRQ1 Predictive Cybersecurity1 Cloud Security1 Digital Supply Chain1 EASM1 FAIR1 Gartner1 Incidents1 LGPD1 Prioritization Matrix1 OpenFAIR1 Polyfill1 Prevention1 Quick Wins1 ROI1 Financial Risk1 Risk1 SOC1 Supply Chain1 Third Parties1 Asset Visibility1 supply chain1 digital supply chain1 board1 risk management1 vendor risk management1 governance1 supply chain attack1 threat intelligence1 exposure validation1 vendor risk1

Filtered by #attack surface · 5 articles Clear filter

#incident response#attack surface

What external visibility gives an incident response team

Sizing an incident is the hardest part of responding to one, and NIST says so in writing. Two lists built from outside change that estimate.

#attack surface#CTEM

Why a company that got hit tends to get hit again

The second incident almost never reuses the first one's vector. What repeats is the condition that opened it, and that survives the response.

#EASM#ASM

EASM: discovering and classifying what you expose online

EASM continuously discovers exposed assets from the root domain, assigns an owner, and classifies exposures, with no agents to install.

#third-party risk#vendor risk management

Third-party risk: why breaches begin at the supplier

The third-party share of breaches doubled in a single year. Why the point-in-time questionnaire failed, and what replaces it.

#Predictive Cybersecurity#Cybersecurity

From reactive to predictive cybersecurity

Cybersecurity is moving from a reactive model to a predictive one. Why continuous attack surface visibility is the foundation for that.