Topic

Attack Surface Management

50 posts

4 Cybersecurity Webinars Worth Your Watch

Haven’t had a chance to tune in to some of our recent webinars? Catch up on what you’ve missed with these on-demand recordings! You can stream the recordings at any time from the links below. Profiles in Threat Hunting: Finding Threats by Observing Behaviors Presenters: Censys Senior Security Researcher Emily Austin; Censys Director of Federal […]

ProxyNotShell Proof Of Concept Now Public

Last week, a security researcher known as “Janggggg” published a proof of concept (PoC) exploit for the latest “ProxyNotShell” vulnerabilities in Microsoft Exchange that were discovered in September. ProxyNotShell is already confirmed to be actively exploited by a Chinese nation-state threat actor at the time of the vulnerability announcement by Microsoft. The attack was initially […]

Cloud Connectors: Complete the Picture of Your Attack Surface

The cloud has quickly become one of the most important — and most exposed — spaces within your attack surface. With an ever-evolving attack surface that constantly impacts assets within cloud environments, it’s no surprise that 65% of high and critical security risks are found in cloud assets. Unfortunately, many attack surface management solutions do […]

Where ASM Fits: A Comparison Guide of Security Tools

Attack surface management (ASM) is an emerging space for information technology (IT) and information security (IS) teams. But there is a common misconception among teams that ASM is designed to replace your other security software. Rather, ASM integrates seamlessly within your security stack, empowering all solutions to better protect both known and unknown assets across […]

Feature Release: Streamline Your Attack Surface Management with Automation and Discovery

Automation and quality data are key ingredients to any successful security program. Quality data in, means quality data out. Automation wherever possible means saving precious time for your security team. This is no different when it comes to External Attack Surface Management products. Today, Censys is excited to launch even more automation and visibility into […]

The Must-Haves of an External Attack Surface Management Solution

External Attack Surface Management (EASM) is becoming a top priority for security leaders in 2022. Why? Digital transformations and rapid cloud adoption have challenged many of the traditional views of cybersecurity. Workforces and business operations have quickly decentralized, widening protection gaps and turning risk management of an organization on its head. Security teams, who were […]

Your Cybersecurity Tech Stack vs. Attack Surface Management

Here’s something you may already know – your attack surface has grown significantly in the past few years. There are many reasons this is the case. COVID forced many workplaces to go remote; the push towards digital transformation has encouraged companies to speed up their cloud adoption; and the frequency of mergers and acquisitions have […]

The 3 Most Critical Requirements for Effective Attribution

Attack Surface ManAttack Surface Managementagement (ASM) is quickly emerging as a critical element of any digital security strategy. Within ASM, a technique called “Attribution” is foundational because it can automatically detect parts of an organization’s external attack surface that they didn’t realize even existed. And when attribution is automated and efficient, it can adapt to […]

The Top 5 Reasons Why You Should Run An Attack Surface Report Before Acquiring a Company

The days before announcing an acquisition are heady ones. Your functional diligence teams, along with lawyers, bankers and often consultants, are scrambling through mountains of information provided by the target, getting ready for a “go/no-go” scenario rivaling any NASA launch. The cybersecurity team is a relatively new but very important player in the process. But […]

What Exactly is an Attack Surface?

In 2020, Capital One was fined $80 million when a cloud misconfiguration resulted in the theft of personal data from 106 million customers. In 2018, Amazon S3 (cloud storage service) was responsible for around 30% of all records exposed, which led to high-profile breaches of the U.S. Department of Defense, Dow Jones & Co., […]

Forrester: How Entire IT Organizations Find Value in Attack Surface Management

Attack surface management was reviewed by Forrester in a recent report to help IT decision makers in security and risk management better understand its function and value as part of the modern security tech stack. It’s no secret that the market for cybersecurity solutions is overflowing with options. How can IT decision makers thoroughly understand which solution […]

What You Need to Know About Our ASM On-Demand Remediation Validation

With new revelations like the Confluence code execution vulnerability, we are reminded how important immediate and accurate information about infrastructure is to security practitioners. Out-of-date software and exposed internal services are unfortunately common and can result in data loss and security breaches when vulnerabilities are uncovered. On-Demand Remediation Validation Now in the Censys ASM Platform, […]