A data-driven and dynamic way to identify assets’ criticality

Today’s businesses rely on websites, cloud apps, remote tools, and third-party services, all of which add to what’s known as an attack…

Every business today has a digital footprint: websites, cloud apps, APIs, and even forgotten servers. Together, these make up your attack…

Extremely powerful dorks that attackers love

The ASM Perspective on Industrial Security…

The Criminal IP search engine, used in over 180 countries worldwide, collects a vast amount of search data every day.
What are the most…

I found many endpoints open, insecure and can change the settings

Hidden endpoint discovery techniques via Urlscan.io

In today’s fast-moving cyber threat landscape, traditional defenses are no longer enough.
AI SPERA’s Criminal IP, developed out of Korea…

“You can’t defend what you can’t see.”

The MTTR Trap: Why Being Busy Doesn’t Make You Secure

Understanding the Expanding Attack Surface

Frogy 2.0 is an automated ASM tool that maps subdomains, verifies live assets, and smartly prioritizes targets using a composite scoring system for red teams.

First published on jonschipp.com.

Attack Surface Management (ASM) is about one simple idea: you cannot protect what you cannot see. AI makes this much stronger by…

In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…

Hi! Today we will talk about domains, subdomains and subdomain enumaration. If want to understand what the subdmains are we have to get to…

Modern attackers don’t “start hacking” when they find a vulnerability. They start earlier — by building a map of everything you expose to…

Attack Surface Drift: Why Your Security Posture Changes Faster Than Your Last Pentest

Gölge BT’den Subdomain Takeover’a: Görünmeyeni Yönetmek ve Korumak