Tagged articles

attack surface management

4 articles · Page 1 of 1

Sep 2, 2026 · Information Security

Why Fixed Vulnerabilities Keep Reappearing: The Hidden Drift in Attack Surface Management

This article explains why asset exposure surfaces reappear after vulnerability patching, distinguishing static patch management from dynamic attack surface relationships, identifying three drift types (asset, connection, responsibility), and proposing three confirmations (object, path, change) to ensure risks truly exit rather than just being patched.

CISA KEVNIST CSFasset drift

0 likes · 10 min read

Why Fixed Vulnerabilities Keep Reappearing: The Hidden Drift in Attack Surface Management

Frontline Investigation

Jul 14, 2026 · Information Security

Vulnerability Management's Overlooked Core: Asset Visibility Over Patches

The article argues that effective vulnerability management depends less on patching speed and more on asset visibility, proposing a four-perspective model (asset, exposure, business, remediation) and a four-question risk prioritization framework aligned with NIST CSF and CISA KEV to move beyond severity scores toward contextual risk reduction.

CISA KEVMLPS 2.0NIST CSF

0 likes · 14 min read

Vulnerability Management's Overlooked Core: Asset Visibility Over Patches

Black & White Path

Feb 8, 2026 · Information Security

Why Attack Surface Management Struggles to Prove ROI

Attack surface management tools promise risk reduction but often deliver only more data, leading to a gap between investment and outcomes; the article explains why ROI is hard to demonstrate, critiques asset‑count metrics, and proposes outcome‑focused measures such as ownership resolution time, unauthenticated endpoint changes, and decommission latency.

ROIasset ownershipattack surface management

0 likes · 9 min read

Why Attack Surface Management Struggles to Prove ROI

vivo Internet Technology

Sep 28, 2022 · Information Security

Attack Surface Management: CAASM and EASM Overview and Practical Implementation

The article explains how emerging CAASM and EASM technologies together enable enterprises to systematically inventory assets, visualize relationships, assess vulnerabilities, and close remediation loops, offering practical guidance for building a continuous, data‑driven attack surface management program that strengthens overall security posture.

CAASMEASMasset management

0 likes · 18 min read

Attack Surface Management: CAASM and EASM Overview and Practical Implementation