Novee Launches External Surface Testing for Enhanced Cybersecurity
Article Content
- •Novee's External Surface Testing identifies exploitable vulnerabilities in internet-facing assets.
- •The tool validates findings from third-party EASM tools and newly disclosed CVEs.
- •Testing is conducted without customer credentials to ensure security and minimize impact.
Novee Cyber Security Ltd. has introduced External Surface Testing to its AI penetration testing platform, enabling security teams to identify and validate exploitable vulnerabilities in their internet-facing assets. The tool assesses newly disclosed CVEs and findings from third-party external attack surface management tools. It aims to address the challenge of forgotten subdomains and exposed infrastructure that attackers may exploit. By requiring only a domain name, Novee's platform can discover web applications, APIs, and other services, providing a prioritized list of validated vulnerabilities. Testing occurs without customer-provided credentials and is designed to minimize operational impact. The new capability is available as part of Novee's platform as of today, November 3, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Following this threat?
Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How does External Surface Testing work?
What types of assets can be tested?
Is there any risk during testing?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…