Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AI-Driven Attack Surface Discovery

netlas.io | blog | #ai-security | #attack-surface | #llm | #pentest | #easm | #netlas

Summary

An experiment applying large language models to attack surface discovery with the Netlas Discovery API, testing whether AI can judge ambiguous asset relationships during exploration.
Published
Collected

original ↗

Related coverage

blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
blog · netspi.com
Harnessing Exposure Management with Continuous Attack Surface Testing
Gartner urges moving beyond vulnerability management toward exposure management. NetSPI explains how pairing external pentesting with EASM enables continuous, prioritized attack surface testing.
blog · netspi.com
NetSPI’s Insights from Forrester’s Attack Surface Management Solutions Landscape, Q2 2024
Forrester's Q2 2024 ASM Solutions Landscape names NetSPI among notable vendors. The article covers the state of the ASM market and how combining EASM and CAASM delivers complete asset visibility.
blog · netspi.com
Clarifying CAASM vs EASM and Related Security Solutions
A guide untangling cybersecurity acronyms: how CAASM differs from CMDB, CSPM, CTEM, DRPS, EASM, and vulnerability scanners, and where it fits in a proactive security strategy.
back