Attack Surface Management Stories - Page 3

Global Stories

Attack Surface Management stories

Google Cloud launches AI Threat Defence against attacks

The new service aims to help firms keep pace as AI-powered criminals automate attacks faster than security teams can patch flaws.

By Sean Mitchell • 4 min read • Last month

Malware

Ferrari deploys Bitdefender platform across operations

The move gives Ferrari a single security system for factory, racing and corporate operations as cyber risks intensify across its connected estate.

By Sofiah Nichole Salivio • 4 min read • Last month

Digital Transformation

ESET invests EUR €40 million in AI cybersecurity R&D

Threats from AI skills are escalating as the cybersecurity group expands research to counter a fast-growing software supply chain and attack surface.

By Karen Joy Bacudo • 4 min read • Last month

Security Operations Centres

Black Kite says 58 CVEs pose critical supply threat

Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.

By Sean Mitchell • 5 min read • Last month

Network Infrastructure

Terra adds continuous testing for network infrastructure

Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.

By Mark Tarre • 4 min read • Last month

Privileged Access Management

Tenable launches Hexa AI with Anthropic partnership

Security teams face faster exploit windows as Tenable rolls out AI-driven remediation tools to customers using its Exposure Management Platform.

By Sean Mitchell • 4 min read • Last month

Security Operations Centres

Qualys data shows vulnerability backlog widening sharply

Patch teams are falling behind as exploited flaws pile up, with 47 million instances still open after a year, Qualys data shows.

By Sean Mitchell • 4 min read • Last month

Digital Transformation

Origina launches OPTAS to protect unsupported software

Enterprises running ageing systems may gain a safer alternative to patching, as the new service flags flaws before vendors disclose them.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Last month

Data Protection

Qualys wins FedRAMP High for TotalCloud cloud security

FedRAMP High approval lets federal agencies and suppliers use TotalCloud to secure sensitive cloud workloads with stricter controls.

By Mark Tarre • 3 min read • Last month

Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • Last month

Digital Transformation

MySQL exposures & slow fixes plague firms, study finds

Nearly half of organisations are leaving risky ports and services open, with midmarket firms taking up to 56 days to fix exposures.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • Last month

Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Last month

Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Last month

Ransomware

Intruder finds exposed MySQL databases in 26% of firms

The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.

By Sean Mitchell • 4 min read • Last month