Kai adds external attack surface management to its defense platform
The new view is meant to inventory internet-facing assets, APIs, and exposed AI infrastructure alongside internal findings.
Stories per day · 30 days
3 RSS
Relatedclaude2criminal-ip2interpol2public-private2threat-intelligence2akamai1anthropic1censys1cleo1code-analysis1configuration1easm1exposure1exposure-management1financial-services1ics1internet-scanning1kai1
26 stories, newest first · one card per story
Stories tagged #attack-surface
Criminal IP joins INTERPOL Gateway to share cyber threat data
AI SPERA will contribute IP, domain and exposed-asset intelligence that INTERPOL may turn into leads for member countries.
1
Akamai post says ARTEX shows overlooked attack surfaces
Visible headings cite South Korean regulators, financial services, and AI speeding attacks rather than changing fundamentals.
2
Anthropic finds 94 cases where settings silently drop security controls
Claude’s review of 25 projects also found pre-authentication code paths; OpenSSH 10.6 cut that reachable code by about a fifth.
1
Anthropic uses Claude to shrink attack surface in open-source code
Claude reported 493 issues across 25 projects and more than five million lines of code.
1
The internet’s attack surface moves at very different speeds
Censys says publicly exposed AI software grew 63% in nine months, led by vulnerable n8n hosts.
3
Most agent-skill listings carry undeclared elevated capabilities
Of 6,309 marketplace listings, seven in ten had an elevated capability, and 59% of declarations understated the bundle.
Help the NCSC understand how organisations approach external attack surface risk
UK NCSC is recruiting practitioners on how organisations assess and buy external attack surface management.
AI Changed the Economics of Cyberattacks
Horizon3.ai argues AI-speed attackers require continuous exposure management, not periodic visibility.
2
Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
Hadrian raised $40 million in Series B funding to expand its autonomous AI offensive security platform.
Securing Computer-Use Agents Against Branch Steering Attacks
Branch steering attacks achieve 94.4% success against computer-use agents and 89.5% against Dual-LLM; COBRA architecture cuts success to 0% while keeping 97% utility.
Most open critical and high flaws are over 90 days old
Detectify found 86-97% of open critical/high vulnerabilities on internet-facing systems of 1,293 customers exceed 90 days, with public sector remediating least.
1
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM
SOCRadar Attack Surface Management now sends external findings into ArmorCode's ASPM workflow.
Which Platforms to Use for Enterprise Threat Intelligence
A CloudSEK-focused guide says enterprise threat intelligence must filter noise and correlate exposure.
2
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Discussion of splitting rare Linux kernel modules like PPPoE and SCTP into separate packages to reduce attack surface after four local root vulns.
Inside the Modern SOC: Defending the Cross-Environment Pivot
Unit 42 reports 43% of investigated attacks span four or more attack surfaces, urging SOCs to use AI-driven cross-domain correlation to reconstruct attack paths.
2
Reachability, Not Observation: Containing Systems Whose Wiring Changes
Theoretical study shows snapshot-based containment vastly underestimates required blocks when wiring changes, proposing reachability-based declared capability maps instead.
Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software
Position paper proposes hierarchical software quality assurance to characterize and secure EV charging station software attack surfaces.
Over 36,000 exposed Plex servers vulnerable to recent flaws
Over 36,000 internet-exposed Plex Media Server instances remain unpatched against recently disclosed vulnerabilities, leaving them open to attack.
Securin Platform helps security teams prove when attack paths are closed
Securin launches the AI-native Securin Platform unifying exposure management, attack surface discovery, offensive validation and remediation to prove attack paths are closed.
2
Using a VM to Contain an AI Agent
Bruce Schneier reports GPT 5.6-Cyber repeatedly succeeded inside VM sandboxes, warning that off-the-shelf VMs cannot contain modern cyber-capable AI agents.
2
How to Secure Enterprise AI: From Adoption to Incident Readiness
Sygnia-backed guidance urges a lifecycle approach to enterprise AI security, citing survey data that AI adoption is outpacing governance and incident readiness.
1
Streamlining Application and API Discovery and Governance
Akamai outlines an approach to streamlining application and API discovery and governance to reduce application and API risk.
The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities
Wiz Research's 2026 cloud risk report finds most high-severity findings lack a viable path to compromise, urging exposure-based prioritization.