Continuous Controls Monitoring: Automatically Identifying Gaps in Security Controls
Today, we are going to talk about something that might not score too high on anyone’s “Oh wow, I’ve been wondering about that” list….
Why Attack Surface Management is Essential for Cybersecurity
If you want to defend yourself, you need to know everywhere that you’re vulnerable. Then, you need to start eliminating those weaknesses. That’s the…
What Is the Difference Between Vulnerability Assessment and Vulnerability Management?
If you have an extremely valuable asset, you need a smart strategy to protect it. Unfortunately, many organizations are operating without one. That lack…
What Are the Different Types of Vulnerability Assessment?
How do we best protect what’s most valuable to us? That’s a question that we all wrestle with. For today’s enterprises, few things are…
4 Top Methods Attackers Use to Move Across Your Hybrid Networks and Compromise Business-critical Assets
Cybersecurity is a cat-and-mouse game, and it’s important for defenders to be able to anticipate the likely methods attackers will use to compromise their…
What Is Proactive Cyber Defense?
Cybercrime is obstructing business and governments worldwide. No longer just an IT problem, it is the biggest threat to organizations’ reputation and business continuity….
CISOs and Their Boards are Failing to Communicate — with Disastrous Results for Enterprise Security
Why changing your reporting approach is the key to connecting with your board and protecting your most critical assets. Today’s CISOs understand that cyber-risk…
How to Combat Advanced Persistent Threats
Imagine the following Security Operations (SecOps) scenario. A large organization conducts regular audits of its security controls. It monitors a collection of intrusion detection…
How Is Your Enterprise IT Hygiene?
We’re hearing a lot these days about the need for strong and consistent enterprise IT hygiene in cybersecurity. Good. What is that, anyway? An…
XM Cyber Advisory – Follina, CVE-2022-30190, Zero Day
On May 27, a new zero day critical vulnerability called Follina was discovered by the nao_sec security research team. The vulnerability resides in malicious…
Chaining together Active Directory attack techniques to give your organization the edge against attackers
Debuting at RSA 2022 we will show the industry how we can link the use of Active Directory (AD) into the entire attack path,…
Decrypting VMware Workstation Passwords for Fun
Overview At XM Cyber, we have been hard at work on the techniques that attackers use against your VMware environments. What you’re about to…
){kind=icon}
){kind=icon}
){kind=icon}
){kind=icon}
Find and fix the exposures that put your critical assets at risk with ultra-efficient remediation.
){kind=icon}
