In order to provide you with the best experience possible we might sometimes track information about you. Sometimes this may involve writing a cookie. We use this information for things like experience enrichment, analytics and targeting advertising. We recommend allowing these functions to get the most out of your experience.
OK
The AI Was New. The Attack Path Wasn’t.
/by Jane Paolucci, CMOWhen OpenAI disclosed that one of its advanced models had compromised parts of Hugging Face’s infrastructure during a security evaluation, most of the coverage went to the obvious headline: an AI system acted like an attacker.
That’s the interesting part. Here’s the part that actually […]
7 Things to Know About Hybrid Exposure Management
/by Renee HaasEnterprise environments are no longer contained within a single data center or cloud provider. They span on-premises networks, public and private clouds, remote locations, operational technology, Internet of Things devices, and third-party infrastructure. This complexity has changed what security teams need from an exposure management platform.
Traditional vulnerability management tools can identify weaknesses, but they often […]
RedSeal Expands Cyber Environment Intelligence with Identity Context, AI Risk Analysis, and End-to-End Attack Simulation
/by Jane Paolucci, CMOLatest platform release helps security teams understand how attacks could move through hybrid environments, prioritize the routes that matter most, and provide AI SOC agents with trusted environment intelligence.
MENLO PARK, Calif., July 1, 2026 – RedSeal, the leader in cyber environment intelligence and exposure assessment for hybrid enterprises, today announced the latest release of the RedSeal Exposure Management Platform. Built on RedSeal’s continuously updated digital twin […]
RedSeal Expands Secure Access to Exposure Intelligence with Attribute-Based Control and AI Guidance
/by Jane Paolucci, CMONew capabilities enable organizations to extend exposure management insights beyond security teams while maintaining governance and accelerating decision-making
MENLO PARK, CA – [June 24, 2026] – RedSeal, the leader in exposure management for hybrid enterprise environments, today announced new Attribute-Based Access Control (ABAC) and AI Guidance capabilities within the RedSeal One platform.
These new capabilities enable […]
Active FortiBleed Campaign Underway: Can Attackers Reach Your Critical Assets?
/by Wayne Lloyd, Federal CTO, RedSealMore than 73,000 FortiGate VPN devices have reportedly been linked to credentials exposed in the recently disclosed FortiBleed dataset. Security teams are understandably focused on the leaked credentials. They should be equally focused on what happens next.
A compromised VPN credential doesn’t create a breach on its own. A breach happens when an attacker uses […]
CISA Just Described Your Monday Morning Problem — And We Already Built the Answer
/by Wayne Lloyd, Federal CTO, RedSealYesterday, CISA Acting Director Nick Andersen stood up at a Washington, D.C. event and said something that should stop every vulnerability management team in their tracks:
“We’re really asking people to take more of a focus on risk associated with each vulnerability. Is it with an asset that is internet-exposed? Does it align to a […]
Master the Fire First: What José Andrés Taught Security Leaders About Thriving in Chaos
/by Jane Paolucci, CMOOne of the most thought-provoking sessions I attended, so far, at the Gartner® Security & Risk Management Summit this week wasn’t led by a security practitioner, analyst, or technology vendor.
It was led by José Andrés.
The renowned chef, humanitarian, and founder of World Central Kitchen spent the session sharing stories from […]
Finding Vulnerabilities Faster Is Not the Same as Reducing Risk
/by Jane Paolucci, CMOAI is rapidly changing how security teams identify vulnerabilities. This week’s introduction of OpenAI’s Daybreak platform is another signal that AI-assisted discovery, analysis, and remediation are moving quickly into mainstream enterprise security conversations.
The promise is compelling: reduce manual analysis, accelerate validation, and help teams move faster from detection to response. OpenAI says Daybreak is designed to support vulnerability […]
The Compliance Trap: Why Security Is Winning the Wrong War
/by Jane Paolucci, CMOA recent conversation with a seasoned industry expert, Andrew Braunberg, Principal Analyst with Omdia, surfaced a troubling reality: as threats accelerate, enterprise security remains anchored to a playbook designed for a very different era. The disconnect growing, raising concerns across security teams, and the trust they place in the systems they use.
For years, security leaders have measured success using familiar metrics: patch rates, CVSS scores, compliance audit […]
Patching Isn’t Enough: CISA’s FIRESTARTER Advisory and What It Means for Your Network
/by Wayne Lloyd, Federal CTO, RedSealCISA doesn’t issue Emergency Directives lightly. When ED 25-03 landed last week — mandating immediate action for federal agencies and urging all U.S. organizations to respond — it came with a warning that should stop every security leader cold:
Patching your Cisco ASA/FTD devices will not remove this threat.
FIRESTARTER is a persistent backdoor specifically […]