Attack surface management

Most Recent

Related events

Identity

Malicious Go package removed from GitHub, but credential threat persists

Steve ZurierAugust 26, 2025

Go module works as advertised as a brute-force tool while secretly exfiltrating credentials.

Vulnerability Management

Rethinking risk based vulnerability management, Black Hat expo insights, and the news – Snehal Antani – ESW #420

August 18, 2025

Interview with Snehal Antani - Rethinking Risk-Based Vulnerability Management. Vulnerability management is broken. Organizations basically use math to turn a crappy list into a slightly less crappy list, and the hardest part of the job as a CIO is deciding what NOT to fix. There has to be a better way, and there is... Segment Resources: https://hor...

Attack surface management

Protecting the IT attack surface while advancing digital transformation

August 7, 2025

What does it take to achieve excellent attack surface management in the age of digital transformation? Protecting complex attack surfaces is difficult and often requires cyber tools that have complementary capabilities. Good cyber hygiene, effective configuration management that enforces cybersecurity policies, and continuous monitoring of cybe...

Black Hat

Fix What Matters With Adversarial Exposure Validation (AEV) – Seemant Sehgal – BH25 #3

August 7, 2025

Live from BlackHat 2025 in Las Vegas, cybersecurity host Jackie McGuire sits down with Seemant Sehgal, founder of BreachLock, to unpack one of the most pressing challenges facing SOC teams today: alert fatigue—and its even more dangerous cousin, vulnerability fatigue. In this must-watch conversation, Seemant reveals how his groundbreaking approach,...

An analyst uses a computer and dashboard for data business analysis and Data Management System with KPI and metrics connected to the database for technology finance, operations, sales, marketing

Identity

Privileged dormant service accounts found on 70% of work environments

Steve ZurierAugust 4, 2025

Overlooked hygiene issues silently open the door to attackers, said Beyond Trust researchers.

Robotic spiders invade circuit board; digital attack background

Penetration Testing

Security tools aren’t enough: Why you don’t know if your defenses actually work (and what to do about it)

Paul WagenseilJuly 31, 2025

Defensive tools are great, but only offensive-security tools can tell you where your weak spots really are. Here's how to start using them.

Attack surface management

Bank attacked with physical ATM implant, novel anti-forensic technique

Laura FrenchJuly 30, 2025

A Raspberry Pi implant with a 4G model provided backdoor access to the ATM network.

Attack surface management

Related events

Attack Surface Management: Continuous discovery, external attack paths

Salesforce security in a shared responsibility world: Eliminating misconfigurations and drift before they become breaches

Attack Surface Management: Continuous discovery, external attack paths

Malicious Go package removed from GitHub, but credential threat persists

Rethinking risk based vulnerability management, Black Hat expo insights, and the news – Snehal Antani – ESW #420

Protecting the IT attack surface while advancing digital transformation

Fix What Matters With Adversarial Exposure Validation (AEV) – Seemant Sehgal – BH25 #3

Privileged dormant service accounts found on 70% of work environments

Security tools aren’t enough: Why you don’t know if your defenses actually work (and what to do about it)

Bank attacked with physical ATM implant, novel anti-forensic technique

Fast Five

Selected by the SC Media Editorial team every Tuesday.