You Can't Out-Patch AI. You Can Out-Reduce It.
AI makes vulnerability discovery and exploitation faster than defenders can patch. Learn why attack surface reduction—not faster patching—is the path forward, and how Censys ASM helps.
Topic
External Attack Surface Management
39 posts
Your DLP Stack Has a Blind Spot. It's the Public Internet.
DLP monitors movement. Censys discovers exposure. You need both; this blog shows you how to find the second one, with queries you can run today.
The Mythos Era of Threat Defense: Censys Sees Exposures and Adversary Infrastructure First
AI models like Claude Mythos are compressing the exposure timeline. Learn how Censys ASM and Censys Platform help teams discover, prioritize, and operationalize internet-facing risk.
Attack Surface Mapping: Know What You Own
Learn about attack surface mapping and analysis and and why they're critical to modern security operations.
Lives on the Line: Hidden Risks in Critical National Infrastructure
Discover how External Attack Surface Management (EASM) protects Critical National Infrastructure from accidental exposures, HMI vulnerabilities, and evolving cyber threats. Learn key strategies from Censys.
ASM CVE Exploit Context: A Smarter Way to Prioritize Vulnerabilities
Censys ASM's new CVE Exploit Context feature helps prioritize vulnerabilities with real-world exploit data. Cut through the noise—see which CVEs attackers target most.
The Global State of Internet of Healthcare Things (IoHT) Exposures on Public-Facing Networks
Censys research reveals 14,004 exposed healthcare devices online, risking patient data breaches. Learn how DICOM, EMR/EHR exposures threaten security and what to do.
Key Metrics for Measuring Success: Introducing New Trends and Benchmarks in Censys Exposure Management
Users of Censys’ Exposure Management solution can now leverage trends and benchmarks metrics to measure the impact of their security initiatives. These new metrics, accessible in Exposure Management dashboards, empower security leaders and their teams with the actionable insights they need to confidently report on security posture, demonstrate ROI, and align their strategies with broader […]
Considering an External Attack Surface Management (EASM) Solution? Here’s What to Look For
External Attack Surface Management or EASM solutions have become an integral part of the modern security tech stack. EASM solutions provide the essential visibility, context, automation, and scalability that organizations need to understand the entirety of their external attack surface and defend against advanced threats. However, as with any tech, not all EASM solutions are […]
Managing Shadow IT Assets with External Attack Surface Management
“You can’t protect what you can’t see.” We say this often at Censys because it’s true. Cybersecurity teams can only monitor, manage, and defend the digital assets they know about. Though most enterprise IT teams have protocols in place for proper tech procurement and onboarding, in today’s rapidly expanding cyber landscape, unauthorized digital assets inevitably […]
Can You Answer These 10 Questions About Your Attack Surface?
Attack surfaces are top of mind for today’s security leaders, according to the recent Censys 2023 State of Security Leadership report. Surveyed security leaders say that understanding the entirety of the organization’s attack surface is their number one priority for the next 12 months. These leaders know that if they don’t understand all of […]
Why an Exposure Management Solution Belongs in Your Tech Stack
Exposure Management solutions are a critical piece of the modern security tech stack. When organizations delay investing in Exposure Management, they limit their ability to effectively defend their security perimeter from attacks. In our recent 2023 State of Security Leadership Report, the majority of surveyed security leaders said that understanding the ENTIRETY of their attack […]
Mission Critical Intelligence: Why This Government Agency Partners with Censys to Understand the Threat Landscape
When ZMap, the world’s first global, open-source internet scanner, was released in 2012, it immediately attracted tens of thousands of users from leading government agencies who conducted critical searches to understand the emerging digital threat landscape. Today, Censys’ proprietary Internet Map is the most comprehensive, up-to-date collection of global internet infrastructure enriched with critical context […]
Latest CISA Directive Highlights Importance of Attack Surface Visibility
Latest CISA Directive Highlights Importance of Attack Surface Visibility By Brad Brooks, Chief Executive Officer, Censys Earlier this week, the Cybersecurity and Infrastructure Security Agency (CISA) issued a new binding operational directive (BOD) requiring federal civilian agencies to enhance protections for devices on government information systems that use network protocols for remote management over public […]
Total Economic Impact™: Censys EASM Customer Voices
Who better to talk about the value of a solution than the folks who actually use it? As part of the recent Total Economic Impact of Censys External Attack Surface Management study, Forrester Consulting independently interviewed Censys customers to learn more about the business value they achieve with our Censys EASM solution. The big […]
Total Economic Impact™ : How Does Censys EASM Deliver Value to Customers?
Censys recently commissioned Forrester Consulting to conduct an independent study of the Total Economic Impact™ of the Censys External Attack Surface Management (EASM) solution. Learn more about what the study found and how to access your copy. When you’re weighing the pros and cons of adding a new solution to your security tech stack, understanding […]
Before the Ink Dries: Assessing M&A Cyber Risk
Mergers and acquisitions may be common, but they’re not without risk, especially when it comes to cybersecurity risk. As cyberattacks increase in frequency and sophistication, the last thing any parent company wants to discover is that they’ve inherited mismanaged or unmanaged assets. Yet, assessing the scope of potential risk can be a tall order. An […]
What You Need to Know About Biden's Long Awaited Cybersecurity Strategy
The Biden Administration’s long awaited National Cybersecurity Strategy was released outlining the strategy, goals, and implementation plan to drive a robust, collaborative approach to securing our global digital landscape. To mitigate the ever-mounting risk in both the public and private sectors, The White House places cybersecurity as a central tenant to the functioning of […]
Why This European Government Agency Uses Attack Surface Management
Attack surface management (ASM) is becoming an integral, value-add strategy for cybersecurity teams across industries, including those in government. Our own partnerships with government agencies around the world highlight how ASM complements government threat hunting and response efforts. Teams use ASM tools like the Censys Attack Surface Management Platform to gain greater visibility into […]
How a State Agency Automated Attack Surface Management in the Age of Remote Work
Soon after the Covid-19 pandemic hit, Censys partnered with a state agency that wanted to scale their risk management program by automating attack surface discovery and tracking. New challenges had emerged after their workforce moved to a remote working state. Key benefits By partnering with Censys, the state agency gained: The goals Manage attack surface […]
3 Reasons It's Time to Start Thinking Like an Attacker
A new cloud security ops goal for 2023? Start thinking like an attacker. No, seriously. If you’ve never thought about what it would be like to try to break-and-enter into your own organization’s cloud infrastructure – like really, truly thought about it – we’re here to say that it might not be a bad idea. […]
ProxyNotShell Proof Of Concept Now Public
Last week, a security researcher known as “Janggggg” published a proof of concept (PoC) exploit for the latest “ProxyNotShell” vulnerabilities in Microsoft Exchange that were discovered in September. ProxyNotShell is already confirmed to be actively exploited by a Chinese nation-state threat actor at the time of the vulnerability announcement by Microsoft. The attack was initially […]
The Evolution of the Zero Trust Framework Part II: The Dawn of ASM
Welcome to Part II of our Zero Trust blog series. If you haven’t had a chance to read Part I on the origins of Zero Trust, you can check it out here. Why did I spend all of those words in my first post detailing a history of a seemingly unrelated framework of Zero […]
The Top 5 Censys-Visible Risks on the Internet
The Internet offers no shortage of risks – but which might your organization be most vulnerable to? To help answer this question, the Censys Research team sampled more than 2 million hosts as part of our 2022 State of the Internet Report. The team chose two dates six months apart and ran risks observed […]
Understanding the Attack Surface of the Internet
In part-two of our Threat Detection, Defense & Remediation Using ASM series – based on this recent eBook from the Censys Research Team – we’re exploring the attack surface of the Internet. How is it evolving, and what do changes in the Internet’s attack surface mean for corporate cybersecurity? When we talk about the “attack […]
How Swiss Life Gained Efficiency & Improved Workflow with Censys
As a financial company that deals in a critical aspect of their clients’ lives, Swiss Life attaches great importance to their corporate governance policies. In following with their procedures around international accounting, auditing, and a code of conduct to safeguard the interests of their shareholders, policyholders, and staff, Swiss Life wanted to better understand […]
In Support of the New CISA Directive (What It Means & How to Take Action)
Earlier this month, the federal government’s Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks. The directive applies to all Federal Civilian Executive Branch systems and the agencies operating those systems. CISA states that their directive is an effort to make more measurable progress […]
The Evolution of the Zero Trust Framework: The Origins
For anyone who has been in the cybersecurity or tech industries for any amount of time, a year or two can feel like an eternity, and a decade tends to leave behind enough techno-fossils to fill countless warehouses. It is therefore hard to believe that the conversation surrounding zero trust has now been taking […]
Avoiding Your Cyberattack Worst-Case Scenarios
Your phone rings in the middle of the night, and when you answer, it’s a call you’ve been dreading. Your company has been the target of a cyberattack. The fallout? Unknown at the moment, but a million scenarios run through your mind. Has customer data been compromised? How much will this cost our organization? Will […]
How Censys ASM Delivers ROI for an International Real Estate Company
When a public real estate company realized they lacked a comprehensive cloud inventory and found evidence of infection, they leveraged the Censys Attack Surface Management platform to gain greater visibility into all of their Internet-based assets. Since partnering with Censys, the company achieved a full view of their attack surface and generated significant ROI. Key […]
Uncover More with Attack Surface Management Inventory Search
A brief history of Censys Search Censys continually scans the entire public IPv4 address space using automatic protocol detection to present the most accurate representation of the internet’s current state. This means that we see the internet for what it is: the good, the bad, and the ugly. Just this year we launched a report […]
Understanding the ASM Alphabet Soup
If you were at Black Hat this year, or if you’ve been doing your homework online on the Internet at all, you’ve probably terms like EASM, ASM, Exposure Management, Attack Surface, and the many other variations that seem to be coming out of the woodwork. Are these tools? Capabilities? Or just the latest marketing […]
Think Like an Attacker: The Importance of ASM in SaaS Cloud Security
Cyber attackers are crawling the Internet constantly, looking for any vulnerabilities to exploit within organizations’ Internet-facing and cloud assets. Organizations and their security teams implement cloud data protection solutions, but unknown — and unsecured — assets remain. How can companies prevent and protect from attacks in a comprehensive way? They need to think like an […]
What is Automated Onboarding in ASM?
While attack surface management (ASM) onboarding may fall lower on the priority list when it comes to considering threat detection and response solutions, the way you start has a significant impact on where your solution can take you. The best way to begin is to take on the perspective of the attacker; an attacker-centric approach […]
Feature Release: Streamline Your Attack Surface Management with Automation and Discovery
Automation and quality data are key ingredients to any successful security program. Quality data in, means quality data out. Automation wherever possible means saving precious time for your security team. This is no different when it comes to External Attack Surface Management products. Today, Censys is excited to launch even more automation and visibility into […]
The Must-Haves of an External Attack Surface Management Solution
External Attack Surface Management (EASM) is becoming a top priority for security leaders in 2022. Why? Digital transformations and rapid cloud adoption have challenged many of the traditional views of cybersecurity. Workforces and business operations have quickly decentralized, widening protection gaps and turning risk management of an organization on its head. Security teams, who were […]
Sprinting to Remediation with Attack Surface Management
As cybersecurity technology has become more sophisticated, so have threat actors and the tactics used to take advantage of digital weaknesses. The evolution of workplace structures and environments has complicated and magnified the need for advanced cybersecurity protocols. Meanwhile, external attack surfaces are growing and exposing organizations to a myriad of privacy and data risks. […]
The Top 5 Reasons Why You Should Run An Attack Surface Report Before Acquiring a Company
The days before announcing an acquisition are heady ones. Your functional diligence teams, along with lawyers, bankers and often consultants, are scrambling through mountains of information provided by the target, getting ready for a “go/no-go” scenario rivaling any NASA launch. The cybersecurity team is a relatively new but very important player in the process. But […]
Mind the (Security) Gap: ASM as a Critical Function During Mergers & Acquisitions
An Overview A PWC report on global M&A trends for 2020 noted that the “pandemic and recent geopolitical developments have already led most companies to the same conclusions, pushing both deal volumes and values higher … particularly for digital and technology assets”. In this blog, I will highlight key benefits of attack surface management when […]