PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Outsmart Cybercriminals with Proactive Attack Surface Management (ASM)

hackerone.com | blog | #attack-surface | #exposure-management | #asm | #hackerone | #security-survey | #attack-resistance
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne survey data shows enterprises leave about 37% of their attack surface unprepared to resist attack. The article explains how continuous attack surface management (ASM) helps close that gap.
Published
Collected

Related coverage

blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · wiz.io
It's Here! Wiz Exposure Management is Now GA
Wiz Exposure Management is GA with Unified Vulnerability Management and Attack Surface Management: ingest external findings, validate exploitability, and prioritize exposures from cloud to code.
blog · wiz.io
Introducing Wiz ASM: Context-Driven Attack Surface Management
Wiz launches ASM with an Attack Surface Scanner that uncovers exposures beyond known DNS — including dynamic cloud addresses and shadow assets — and prioritizes them with context and ownership.
blog · netspi.com
NetSPI’s Insights from Forrester’s Attack Surface Management Solutions Landscape, Q2 2024
Forrester's Q2 2024 ASM Solutions Landscape names NetSPI among notable vendors. The article covers the state of the ASM market and how combining EASM and CAASM delivers complete asset visibility.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
Back