PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

When Automation Isn’t Enough: The True Impact of Human Expertise on Your Perimeter

bishopfox.com | blog | #continuous-testing | #attack-surface | #automation | #red-team | #penetration-testing | #git-exposure
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ori Zigindere explains why scanners miss seemingly minor attack surface exposures such as .git/config files, and how human experts turn these leads into deeper high-impact findings.
Published
Collected

Related coverage

blog · netspi.com
2021 Cyber Security Predictions: A Forecast for the Future
A NetSPI director offers eight predictions for 2021: automation paired with human context, security hiring and budgets, risk-based security, insider threats, and external attack surface management.
blog · netspi.com
Four Ways Pentesting is Shifting to an “Always On” Approach
Point-in-time pentests leave 364 untested days a year; PTaaS combines manual and automated testing with 24/7 scanning, broader coverage, and streamlined reporting to keep testing always on.
blog · netspi.com
Four Must-Have Elements of an Always-On Cyber Security Program
Hackers strike every 39 seconds, so annual pentesting is not enough; four core elements of an always-on security program built around continuous testing and monitoring of a growing attack surface.
blog · projectzero.google
Windows Sandbox Attack Surface Analysis
Analyzing the attack surface of user-mode sandboxed applications helps find elevation of privilege bugs; automating the enumeration matters for initial analysis and detecting regressions.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
Back