XM Cyber expands platform to enforce least-privilege access

XM Cyber Inc. announced an expansion of its platform with new capabilities designed to help enterprises enforce least-privilege access across Active Directory, Microsoft Entra, and multicloud environments. The expansion addresses the prevalent issue of excessive permissions, which attackers exploit for lateral movement after compromising a single account, a threat amplified by AI-driven credential attacks, as reported by Silicon Angle.

The platform expansion introduces two key features. Active Directory Excessive Permissions analyzes the actual usage of assigned privileges, providing data to justify revoking unused access. A new Cloud Infrastructure Entitlement Management feature profiles entitlement usage across multicloud environments, enabling DevSecOps and cloud security teams to reduce overly permissive roles.

By correlating permission usage with mapped attack paths, XM Cyber aims to help security teams differentiate between theoretically risky permissions and those actively exploitable by attackers.

Source: Silicon Angle