What Are the Different Types of Vulnerability Assessment?
How do we best protect what’s most valuable to us? That’s a question that we all wrestle with. For today’s enterprises, few things are…
4 Top Methods Attackers Use to Move Across Your Hybrid Networks and Compromise Business-critical Assets
Cybersecurity is a cat-and-mouse game, and it’s important for defenders to be able to anticipate the likely methods attackers will use to compromise their…
What Is Proactive Cyber Defense?
Cybercrime is obstructing business and governments worldwide. No longer just an IT problem, it is the biggest threat to organizations’ reputation and business continuity….
CISOs and Their Boards are Failing to Communicate — with Disastrous Results for Enterprise Security
Why changing your reporting approach is the key to connecting with your board and protecting your most critical assets. Today’s CISOs understand that cyber-risk…
How to Combat Advanced Persistent Threats
Imagine the following Security Operations (SecOps) scenario. A large organization conducts regular audits of its security controls. It monitors a collection of intrusion detection…
Chaining together Active Directory attack techniques to give your organization the edge against attackers
Debuting at RSA 2022 we will show the industry how we can link the use of Active Directory (AD) into the entire attack path,…
Decrypting VMware Workstation Passwords for Fun
Overview At XM Cyber, we have been hard at work on the techniques that attackers use against your VMware environments. What you’re about to…
Our security is only as strong as our ability to manage it: The necessity of Attack Path Management for the Hybrid Cloud
Now it’s no secret businesses have ramped up and driven the adoption of the cloud faster than any period previously. One of the key…
The XM Cyber 2022 Attack Path Management Impact Report
The industry’s first annual attack path management research report is here! The XM Cyber research team analyzed nearly 2 million entities to bring insights…
5 Ways to Make Attack Path Management More Manageable
Effective cybersecurity can be distilled to a single idea: Protect your most business critical assets. Protecting your most critical assets, in turn, can be…
XM Cyber Advisory – Spring4Shell, Zero Day
Overview On March 30, A new zero day critical vulnerability was leaked in another open source software library. The vulnerability affects Spring Framework which…
New Privilege Escalation Techniques are Compromising your Google Cloud Platform
In this research you’ll discover some of the common attack techniques used in Google Cloud Platform (GCP) to better understand how an attacker exploits…