#attacksurfacemanagement
LightNews LightNews
assetnote.io
Last month, our Security Research team discovered and disclosed a critical pre-authentication RCE in CraftCMS (CVE-2024-56145). You can read our blog post on the issue here: assetnote.io/resources/re...

#attacksurfacemanagement
December 19, 2024 at 2:12 AM
ralf-ladner.bsky.social
Tankfüllstandsmesser in Tankstellen öffentlich über das Internet erreichbar

#AttackSurfaceManagement #Authentifizierung #AutomaticTankGauge @censysio #Cybersecurity #Cybersicherheit #Tankfüllstandsmesser #Tankstelle #ThreatHunting

netzpalaver.de/2026/...
June 3, 2026 at 12:18 PM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #PaloAltoNetworks PA product:

CVE-2024-0012: authentication bypass on mgmt interface
CVE-2024-9474: authenticated (bypassed) RCE on mgmt interface

www.onyphe.io/search?q=cat...
November 19, 2024 at 4:46 PM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #PaloAltoNetworks PA product:

CVE-2025-0108: authentication bypass on management interface

search.onyphe.io/search?q=cat...

Thanks to @assetnote.io for having shared the detection method.
February 14, 2025 at 9:16 AM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #Mitel MiCollab product:

CVE-2024-35286: unauthenticated SQL injection on login page
CVE-2024-41713: unauthenticated arbitrary file read

www.onyphe.io/search?q=cat...
December 6, 2024 at 9:58 AM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #MongoDB product:

CVE-2025-14847: remote unauthenticated memory reading #MongoBleed

search.onyphe.io/search?q=cat...
December 28, 2025 at 5:45 PM
ralf-ladner.bsky.social
Schwachstellen proaktiv mit Threat-Hunting in Echtzeit erkennen

#AttackSurfaceManagement @censysio #Cybersecurity #Cybersicherheit #RedTeam #Security #ThreatHunting

netzpalaver.de/2025/...
June 17, 2025 at 1:51 PM
ralf-ladner.bsky.social
Warum bei der wachsenden Angriffsfläche Attack-Surface-Management unverzichtbar ist

#Angriffsfläche #ASM #AttackSurfaceManagement @censysio #Cybersecurity #Cybersicherheit #EASM #Schwachstelle

netzpalaver.de/2025/...
November 25, 2025 at 2:44 PM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #n8n product:

CVE-2026-21858: unauthenticated remote code execution #Ni8mare

search.onyphe.io/search?q=cat...
January 8, 2026 at 10:06 AM
onyphe.io
📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #SmarterMail product:

CVE-2025-52691: remote unauthenticated file upload & overwrite

search.onyphe.io/search?q=cat...
January 2, 2026 at 10:16 AM
ralf-ladner.bsky.social
Wie Transparenz vor Stillstand schützt

#AttackSurfaceManagement #Bedrohungsanalyse @censysio #Cybersecurity #Cybersicherheit #EchtzeitMonitoring #Ransomware #Security

netzpalaver.de/2025/...
October 24, 2025 at 12:10 PM
ralf-ladner.bsky.social
Sommerzeit ist Angriffszeit

#AttackSurfaceManagement @censysio #Cybersecurity #Cybersicherheit #Ferien #ThreatHunting #ThreatIntelligence #Urlaub #Censys

netzpalaver.de/2025/...
July 30, 2025 at 1:29 PM
ralf-ladner.bsky.social
Schwachstelle in Tenda-AC7-Routern

#AttackSurfaceManagement @censysio #Cybersecurity #ITSicherheit #Schwachstelle #Tenda #TendaAC7Router

netzpalaver.de/2025/...
March 18, 2025 at 12:42 PM
ralf-ladner.bsky.social
Online-Angriffsfäche mit Attack-Surface-Management minimieren

Interview mit Tabatha von Kölichen von Censys

#Censys #Angriffsfläche #AttackSurfaceManagement
#Cybersecurity #EASM #IoT #Security #Sicherheitsarchitektur #ThreatHunting

youtu.be/dTk6x1iKw1w?... via
@YouTube
Interview mit Censys - Online-Angriffsfäche mit Attack-Surface-Management minimieren
YouTube video by netzpalaver
youtu.be
November 20, 2024 at 11:24 AM
opsmatters.com
The latest update for #CyCognito includes "Emerging Threat: (CVE-2026-69197) Umbraco CMS Protected Content Disclosure via Delivery API Expansion".

#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X
CyCognito
CyCognito solves one of the most fundamental business problems in cybersecurity: seeing how attackers view your organization, where they are most likely to break in, what systems and assets are at risk and how you can eliminate the exposure.
opsmtrs.com
September 24, 2026 at 12:00 AM
ralf-ladner.bsky.social
Analyse der Time to Live von Bedrohungsinfrastrukturen

#AttackSurfaceManagement @censysio #CobaltStrike #Cybersecurity #Cybersicherheit #Security #ThreatHunting #ThreatIntelligence #Viper

netzpalaver.de/2025/...
September 3, 2025 at 1:22 PM
ralf-ladner.bsky.social
Von Schwachstellenlisten zu echten Risikobewertungen

#AttackSurfaceManagement #Authentifizierung #Cybersecurity #Cybersicherheit #ExposureManagement #IdentitySecurity #MultifaktorAuthentifizierung @Outpost24 #Risikomanagement #Schwachstelle #ThreatIntelligence

netzpalaver.de/2026/...
January 15, 2026 at 1:13 PM
ralf-ladner.bsky.social
Warum bei der wachsenden Angriffsfläche Attack-Surface-Management unverzichtbar ist

#Angriffsfläche #ASM #AttackSurfaceManagement @censysio #Cybersecurity #Cybersicherheit #EASM #Schwachstelle

netzpalaver.de/2025/...
November 26, 2025 at 11:43 AM
ralf-ladner.bsky.social
Warum die Sichtbarkeit von Online-Angriffsflächen bei KRITIS so wichtig ist

#AttackSurfaceManagement @censysio #Cybersecurity #ICS #IndustrialControlSystem #KRITIS #OTSecurity #ThreatHunting #ThreatIntelligence

netzpalaver.de/2025/...
June 24, 2025 at 12:13 PM
ralf-ladner.bsky.social
Censys untersucht die Ausbreitung von sechs Schwachstellen via Salt-Typhoon in Netzwerkdiensten

#AttackSurfaceManagement @censysio #Cybersecurity #SaltTyphoon #Schwachstelle #Security #Telekommunikation #ThreatHunting #ThreatIntelligence

netzpalaver.de/2025/...
June 10, 2025 at 2:11 PM
potato.software
The latest update for #ArcticWolf includes "A Practical Guide to #AttackSurfaceManagement" and "The Trillion-Dollar BO Bet Needs a Security Strategy".

#potatosecurity #infosec #networks https://opsmtrs.com/2ZFbaTl
September 2, 2026 at 1:55 AM
Another update from #Qualys #ROCon keynote w/ Shailesh Athalye: integration of identity security w/ TruRisk Platform pulling data from Active Directory for context to mitigating risk from access points.
#identitysecurity #riskmanagement #trurisk #riskremediation #attacksurfacemanagement
October 15, 2025 at 5:03 PM
opsmatters.com
The latest update for #CyCognito includes "Emerging Threat: (CVE-2026-56291) Balbooa Forms Remote Code Execution via Unauthenticated File Upload".

#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X
CyCognito
CyCognito solves one of the most fundamental business problems in cybersecurity: seeing how attackers view your organization, where they are most likely to break in, what systems and assets are at risk and how you can eliminate the exposure.
opsmtrs.com
July 13, 2026 at 3:35 AM
bradleyschagrin.bsky.social
When Identity Lies: How Modern Systems Invite the Enemy Inside
open.substack.com/pub/bradleys...
#IdentitySecurity#ZeroTrust#BehaviorBasedSecurity#Cybersecurity #AttackSurfaceManagement #AccessControl #DigitalIdentity
#ObserveID
When Identity Lies: How Modern Systems Invite the Enemy Inside
The Trojan Horse Doctrine:
open.substack.com
November 17, 2025 at 2:12 PM
opsmatters.com
The latest update for #IONIX includes "CVE-2025-20333: Authenticated RCE in Cisco ASA / FTD VPN Web Server" and "Exposed #AI Agents in the Wild: How a Public MCP Server Let Us Peek Inside Its Host".

#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/3TB5mSA
IONIX
IONIX is the only EASM solution that discovers the full extent of your online risk exposure and actively protects your hyper-connected external attack surface.
opsmtrs.com
September 26, 2025 at 3:50 PM