Feeds2.Feedburner Infoblox Launches EASM Tools to Enhance Cybersecurity Posture
Article Content
- •Infoblox enters the EASM market with new tools for exposure management.
- •The Supply Chain Intelligence feature monitors vendor assets for risks.
- •Early access program revealed vulnerabilities in a third of participating organizations.
Infoblox has entered the External Attack Surface Management (EASM) market with new tools aimed at helping organizations identify and mitigate vulnerabilities in their internet-facing assets and those of critical vendors. The launch includes a Supply Chain Intelligence feature, which continuously monitors vendor assets for exposures and threats. Infoblox's EASM solution leverages its DNS expertise to discover assets without requiring software agents or active scanning. This approach aims to address the increasing speed of cyberattacks, where reconnaissance and exploit development are compressed to hours. An early access program revealed that a significant number of organizations had exploitable DNS issues, including dangling CNAME records. The new capabilities are positioned as part of a broader Exposure Management strategy, emphasizing the need for continuous visibility into external attack surfaces.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…