What is a Security Control Validation?
Most of today’s enterprises layer dozens of security tools together to maintain a robust security posture. Yet “more is better” doesn’t always apply in…
What is Vulnerability Management?
Organizations rely on a process called “vulnerability management” to help identify, analyze, treat and report on security vulnerabilities within their systems and applications. This…
What are Breach and Attack Simulations?
These exercises are led by seasoned security professionals and staged under controlled environments. Ultimately, both sides work together to provide a clearer picture of…
What is a Red Team?
Red teams are “ethical hackers” who help test an organization’s defenses by identifying vulnerabilities and launching attacks in a controlled environment. Red teams are…
What is a Blue Team?
During cyber security testing engagements, blue teams evaluate organizational security environments and defend these environments from red teams. These red teams play the role…
What is a Purple Team?
In the context of cybersecurity testing, red teams play the role of attackers, and blue teams act as defenders. A purple team falls…
Hybrid Cloud Security
Reduce risk with continuous assessment Migrating to and maintaining a hybrid cloud environment continues to be challenging from a cybersecurity point of view, with…
Ask me Anything about Ransomware
We gathered a forum of experts to answer your burning questions on the topic of ransomware
Attack Path vs Attack Vector: Important Differences You Need To Know
If you want to solve a problem, defining your terms is essential — and there are few more pressing problems than safeguarding critical assets…
Top 3 Benefits of Ransomware Readiness Assessment
After so many recent high-profile ransomware attacks, CISOs, SOC Managers and other cybersecurity leaders are certainly aware of the risks involved. Global costs from…
Time to go beyond Log4Shell and see the entire attack path
Today’s organizations are overwhelmed since the world first learned about the Log4Shell vulnerability (aka Log4J CVE-2021-44228, CVE-2021-45046). If prioritizing your vulnerabilities was a daunting…
XM Cyber Advisory – Log4Shell, CVE-2021-44228
Overview Last Thursday, December 9, the Log4Shell vulnerability, CVE-2021-44228 (CVSS score 10), was discovered. This remote code execution (RCE) vulnerability was being exploited in…
){kind=icon}
){kind=icon}
){kind=icon}
){kind=icon}
Find and fix the exposures that put your critical assets at risk with ultra-efficient remediation.
){kind=icon}