Attack Surface Management Stories

Global Stories

Attack Surface Management stories

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • 3 days ago

Software-as-a-Service

Entrovy launches kinetic8 for enterprise cyber visibility

Enterprise security teams can now move from fragmented asset views to explainable risk scoring, as the platform reaches general availability.

By Sean Mitchell • 4 min read • Last week

Manufacturing

Vicarius finds 79% hit by known vulnerability incidents

Security teams are leaving known flaws exposed, with most responses still ending in tickets or handoffs rather than confirmed fixes.

By Sean Mitchell • 4 min read • Last week

Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last week

Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Malware

AI deserves our appreciation, but only if we're honest about what we're appreciating

AI is speeding up attacks as well as defence, with high-risk prompts and unsupervised agents exposing firms to new security gaps.

By Robert Falzon • 4 min read • Last week

Endpoint Protection

CrowdStrike names AJ Shipley as Chief Product Officer

The hire bolsters CrowdStrike's push into AI security as rivals race to simplify sprawling cyber defence stacks for enterprise customers.

By Mark Tarre • 4 min read • Last week

Hybrid Cloud

Check Point: Be the best, or get out the way

Rising AI-driven attacks are compel security buyers to cut vendor sprawl, though Check Point warns over-consolidation can still raise risk.

By Donovan Jackson • 5 min read • Last week

Hybrid Cloud

Tenable adds app security data to exposure platform

Security teams can now rank code flaws against cloud and identity risks after Tenable folded application security data into its exposure platform.

By Mark Tarre • 4 min read • Last week

Disaster Recovery

Check Point: Hackers are already in. Act accordingly

Hackers are exploiting vulnerabilities in hours or minutes, leaving many organisations compromised before defenders spot the breach.

By Donovan Jackson • 5 min read • Last week

Software-as-a-Service

AWS Builder Centre expands with free sandbox workshops

Free workshop sandboxes should make it easier for developers to try AWS training without a personal account, credit card or cleanup.

By Sean Mitchell • 5 min read • Last week

Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • This month

Hybrid Cloud

BeyondTrust launches NHI governance for machine identities

Security teams can now tighten oversight of service accounts, API keys and AI agents as machine identities outnumber staff in many enterprises.

By Mark Tarre • 4 min read • This month

Digital Transformation

Frame launches AI campaign against social engineering

Rising use of deepfakes and voice cloning is forcing firms to rethink staff training as insurers and buyers scrutinise human risk more closely.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

Attack Surface Management stories

Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • Today

Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • Last week

Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Last week

Cloud Security

RiskProfiler wins 120 G2 nods across 31 categories

The recognition underscores rising demand for cyber-risk tools that show measurable returns, as buyers demand faster deployment and continuous monitoring.

By Sofiah Nichole Salivio • 4 min read • This month