Kai adds external attack surface management to its defense platform
The new view is meant to inventory internet-facing assets, APIs, and exposed AI infrastructure alongside internal findings.
Stories per day · 30 days
3 RSS
Relatedfinancial-services3nodezero3check-point2easm2horizon32activemq1adversarial-exposure-validation1ai-governance1ai-red-team1anthropic1armadin1attack-surface1breach-and-attack-simulation1caasm1claude-mythos1ctem1cymulate1data-exposure1
52 stories, newest first · one card per story
Stories tagged #exposure-management
Roundup ranks ten adversarial exposure validation platforms for 2026
Pentera leads for proof from live exploitation; Cymulate and Horizon3.ai’s NodeZero take the next spots.
Horizon3 whitepaper touts NodeZero for financial services security
The paper describes autonomous attack-path testing, a roughly 16-hour financial services case, and compliance-oriented retesting.
Horizon3.ai proposes four metrics to measure attack resistance
The metrics track attack paths, impact reduction speed, verification coverage and recurrence to see if environments become harder to attack.
Check Point lists five tests for exposure management platforms
The vendor says customers often apply a safe interim fix within one hour when ownership and control context are already known.
Gartner Outlines Four Elements for Exposure Prioritization
Organizations using threat intelligence, asset context, exploitability modeling and control validation can reduce breach likelihood by 70 percent.
Armadin finds 88% of severe flaws missed by vendor advisories
Custom code and exposed service accounts made up most missed severe findings in enterprise tests.
Check Point pitches safe remediation to move unused protections to enforce
The partner piece says 47% of measured organizations had under 50% protection enablement and cites a 99.5% remediation success rate.
1
Commentary says defenders must catch up after Claude Mythos
Cited tests say Mythos ran a 32-step simulated network attack, and Glasswing is expanding to about 150 organizations.
5
Tenable describes how shadow AI spreads and how to contain it
IBM figures cited put shadow AI breach incidents at 43%, with an average cost of $5.39 million.
1
Finance firms found attack paths after expanding NodeZero testing
Horizon3 case studies say a Dev environment reached production Domain Admin and one credential exposed about 300,000 files.
1
Meeting the ECB’s AI-Enabled Cybersecurity Supervisory Recommendations with NodeZero®
Horizon3 says NodeZero can evidence bank compliance with ECB cybersecurity supervisory recommendations.
Help the NCSC understand how organisations approach external attack surface risk
UK NCSC is recruiting practitioners on how organisations assess and buy external attack surface management.
AI Changed the Economics of Cyberattacks
Horizon3.ai argues AI-speed attackers require continuous exposure management, not periodic visibility.
2
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
AI SPERA launched AITEM, an AI threat-exposure product extending Criminal IP attack surface management.
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Sponsored Hacker News roundup outlines 2026 cybersecurity trends across identity, endpoints, exposure, and AI-driven operations.
3
What Security Metrics Actually Matter?
Horizon3.ai argues CTEM programs should measure attack-path elimination and impact reduction instead of vulnerability counts and patch SLAs.
1
How AI Is Changing the Roles Required in the Security Operations Center
Rapid7 says AI should move SOC analysts from alert triage to case ownership, citing Gartner workforce guidance.
Most open critical and high flaws are over 90 days old
Detectify found 86-97% of open critical/high vulnerabilities on internet-facing systems of 1,293 customers exceed 90 days, with public sector remediating least.
1
New infosec products of the month: September 2026
September 2026 infosec roundup covers new AI-agent controls and exposure tools from Ping Identity, Akeyless, Securin, Cohesity, and others.
3
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Forrester named Wiz a Leader in its Q3 2026 Wave for proactive security platforms.
Begin at the End: How to Enable Agentic Remediation
Opinion column urges teams to automate low-risk patching with bounded AI agents and keep humans on high-risk fixes.
1
Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal
Dragos completed its NetRise and runZero acquisitions after Accenture's majority investment closed, extending its OT security platform into exposure management and supply chain visibility.
CTEM Buyer’s Guide: How to Evaluate the Technologies That Turn Continuous Threat Exposure Management Into an Operating Model
Horizon3.ai published a buyer's guide for evaluating Continuous Threat Exposure Management (CTEM) technologies based on proven exploitability and measurable risk reduction.
1