AI is changing cybersecurity on both sides of the equation.
Defenders are using AI to find vulnerabilities faster. Attackers are gaining new ways to analyze disclosures, develop exploits, and compress the time between discovery and attack. Meanwhile, security teams are already managing more vulnerabilities than they can realistically investigate or remediate.
New research from Google […]
Is Your Security Program Ready for Autonomous Interdiction?
Security teams have never had more data. More vulnerability findings. More asset inventories. More threat intelligence. More dashboards.
Yet AI-enabled attackers can identify and exploit weaknesses faster than traditional, human-led remediation processes can respond. The challenge is no longer limited to finding and prioritizing exposures. Organizations need […]
Enterprise environments are no longer contained within a single data center or cloud provider. They span on-premises networks, public and private clouds, remote locations, operational technology, Internet of Things devices, and third-party infrastructure. This complexity has changed what security teams need from an exposure management platform.
Traditional vulnerability management tools can identify weaknesses, but they often […]
Security teams are drowning in vulnerabilities. Thousands of new Common Vulnerabilities and Exposures (CVEs) emerge every month, and the number of assets in hybrid environments continues to grow. The challenge isn’t finding exposures; it’s knowing which ones actually matter. With limited staff and constant pressure to reduce risk, the critical question becomes: Which risks do we tackle first, and why?
Moving Beyond a List of Vulnerabilities
Traditional tools […]
By Kes Jecius, RedSeal Senior Consulting Engineer
The Center for Internet Security’s (CIS) twelfth control for implementing a cybersecurity program is for your organization to control the flow of information transferring between networks of different trust levels. The first sub-control states that an organization should maintain an inventory of all network boundaries. So, the first […]
By Kes Jecius, RedSeal Senior Consulting Engineer
The Center for Internet Security’s (CIS) eleventh control for implementing a cybersecurity program is for your organization to actively track, report on, and correct the security configurations for network devices. This involves the use of a configuration management system and robust change control processes. What has been missing […]
By Kes Jecius, RedSeal Senior Consulting Engineer
The Center for Internet Security’s (CIS) ninth control for implementing a cybersecurity program is for your organization to manage the ports, protocols, and services on a networked device that are exposed and vulnerable to exploitation. The intent of the control is for your organization to understand, reduce and […]
By Kes Jecius, RedSeal Senior Consulting Engineer
The Center for Internet Security’s (CIS) third control for implementing a cybersecurity program is to practice continuous vulnerability management. Organizations that identify and remediate vulnerabilities on an on-going basis will significantly reduce the window of opportunity for attackers. This third control assumes you’ve implemented the first two CIS […]
By Kes Jecius, RedSeal Senior Consulting Engineer
The Center for Internet Security’s (CIS) first control for implementing a cybersecurity program is to understand and manage the hardware assets that make up your IT infrastructure. These hardware assets consist of network devices, servers, workstations, and other computing platforms. This is a difficult goal to achieve, further […]
By Kes Jecius, Senior Consulting Engineer
I have the privilege of working with security groups at many different enterprise companies. Each of them is being bombarded by many different vendors who offer security solutions. No surprise, the common estimate is that there are approximately 2,000 vendors offering different products and services to these companies.
Each […]
