Market monitor · 6 October–5 November 2026
European Exposure Management Market: news river
865 articles and posts matched in the period, 851 stories, newest first.
Thursday 5 November 2026
@businesstechweekly.bsky.social on Bluesky Mastering the Vulnerability Management Lifecycle https://www.businesstechweekly.com/cybersecurity/data-security/vulnerability-management-lifecycle/
Phoenix Security From Freezer Hacks to Developer Compromise: Ordinary Weaknesses, Extraordinary Consequencesvendor
Wednesday 4 November 2026
@outagewatch.flarewarden.com on Bluesky 🟡 Tenable: Tenable Vulnerability Management: Scan Processing Delays Minor issue · Security · since 20:00 UTC Affected: US-1A, US-2A, US-2B, US-3A +14...
Intruder on LinkedIn Last week, nginx stopped our PHP2Shell exploit from working remotely on PAN-OS.social
Phoenix Security on LinkedIn Phoenix Security | ASPM: Meet the lucky winners of our Lonestar Application Security Conference (LASCON) raffle!social
cloudnativenow.com How Exposure Management Improves Cloud Detection and Response
@threatngsec on X A stolen session cookie just bypassed your MFA.
Greenbone on LinkedIn At it-sa – Home of IT Security, AI security came up at our stand again and again.social
SignalFisher on LinkedIn Did you miss Sandro Nafzger ’s keynote at it-sa – Home of IT Security last week?social
Bitdefender on LinkedIn AI is exploiting and expanding your attack surface faster than most teams can map it.social
Kaduu on LinkedIn Darknetsearch.com: 🚨 Fake interviews can be used to deceive victims into cryptocurrency scams.social
Outpost24 on LinkedIn Stop by the Outpost24 booth to see AI Security Testing in action.social
More: Outpost24 on LinkedIn
Intigriti on LinkedIn AI can help security teams and researchers find more potential issues faster.social
CovertSwarm on LinkedIn An attacker with a goal can cross your web app, your network, and your people in a single route.social
@WorldCyberNewsX on X Organizations struggle to prove VM effectiveness without metrics.
SignalFisher on LinkedIn Marco Bertozzi brings both – plus a steady supply of wordplay nobody asked for, but somehow everyone appreciates.social
YesWeHack on LinkedIn But can you achieve that when pentests take months to schedule and provide results?social
@outagewatch.flarewarden.com on Bluesky 🟠 Tenable: Tenable Vulnerability Management: Delay in Findings Service disruption · Security · since 07:30 UTC Affected: FRA Our probes: tenable.com...
cybersecuritynews.com Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]
Phoenix Security Phoenix Security Makes Purple Hook Generally Available to Deliver the Fix Inside the Sessionvendor
Acronis on LinkedIn We're pleased to welcome Tony Stratton to Acronis as General Manager for Australia and New Zealand.social
@YDS95 on Reddit How to learn cloud security
Tuesday 3 November 2026
@PicusSecurity on X Enterprises test only 32% of their attack surface on average (Omdia).
@wijbusinessnieuws.bsky.social on Bluesky Cyber attacks on cooling systems: does your company know what is vulnerable?
@securityelites1.bsky.social on Bluesky 📢 Hacker Recon Checklist: 10-Step Ethical Hacking Recon Guide Learn the hacker recon checklist used in penetration testing and bug bounty hunting....
Pentest-Tools.com on LinkedIn Every practitioner remembers the first time two small findings added up to something serious.social
Aikido Security on LinkedIn Our co-founder Madeline is quoted in The Washington Post's guide on what to do about the new wave of AI hacks.social
helpnetsecurity.com Novee puts forgotten internet-facing assets through penetration testing
@h4zy.bsky.social on Bluesky Ah similar to vulnerability management can easily be 80% asset management
Enginsight on LinkedIn The number of new CVEs (Common Vulnerabilities and Exposures) is growing faster than patch teams can keep up.social
@DEVOTOMSOLUTION on X Rank exposures by four questions — exploited?
Aikido Security on LinkedIn KEYES (formerly the NRB) is one of Belgium’s largest ICT groups, and sovereignty is a strategic priority for them.social
G DATA CyberDefense Attack on the cold chain: Unknown individuals manipulate refrigeration systems in supermarketsvendor
OnSecurity on LinkedIn here are our most explosive vulnerability findings from the testing team this month.social
@niebezpiecznik.bsky.social on Bluesky Zhakuj te rządowe serwery, to jeszcze Ci zapłacą! Można dostać nawet 20 000 za błąd, o ile jest krytyczny
@zaufana3strona.bsky.social on Bluesky Startuje polska platforma bug bounty pod opieką CERT Polska zaufanatrzeciastrona.pl/post/startuj..
Detectify on LinkedIn We’re hiring across several teams, including engineering, product and sales.social
Nordic Defender on LinkedIn You have a web application your customers rely on—whether it’s your product, your customer portal, or part of the service you deliver.social
interestingengineering.com OpenAI joins forces with security researchers to strengthen its digital defenses
Aleph Index on LinkedIn With AI, a single individual now conducts what required an entire team yesterday.social
@kitafox.bsky.social on Bluesky From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. (AI-generated vulnerability reports increase, making
@Shelter_Appropriate on Reddit Building an agentic CVE watcher, tell me what's wrong with this idea
Axonius Resources How to track and report cybersecurity metrics with Axonius
Monday 2 November 2026
Phoenix Security Binance $6.3B Hack: How a Compromised DevOps Laptop Reached the Hot-Wallet Signer (No CVE)vendor
Phoenix Security on LinkedIn Phoenix Security | ASPM: Two CVSS 9.2s, one backdoored extension and zero days off.social
Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime Analysis After the Refrigeration System Attack in France: Two Thirds of Exposed Refrigeration Controllers Share an Address with Cameras, Remote Desktop, and VPNs
@profsimononline.bsky.social on Bluesky Severity ratings tell you what could happen
Aikido Security on LinkedIn A Linux kernel flaw (CVE-2026-98432) could let a remote attacker take over an unpatched server with no credentials.social
Digital Shadows The SOC Analyst Role Is Not Going Away. Agentic Defense Is Making It Stronger.vendor
Aikido Security Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)vendor
Outpost24 on LinkedIn Two full days of conversations, demos, and meetings with the MSP community at PortAventura.social
ThingsRecon on LinkedIn ThingsRecon · Supply Chain Intelligence: Your supplier's cybersecurity posture hasn't changed.social
Lansweeper on LinkedIn Nothing as fulfilling as seeing our office space gaining life 🧑💻 How's your Monday going?social
Sunday 1 November 2026
@ireneinthecloud.bsky.social on Bluesky Standard vulnerability management processes were built to deal with average exploitation times after disclosure on the order of months and years....
@ireneinthecloud.bsky.social on Bluesky AI shifts attacker economics via scale and speed
@Artilas_Digital on Reddit Shannon: an autonomous, AI pentester for web applications and APIs (50k stars)
Saturday 31 October 2026
Searchlight Cyber on LinkedIn All month, we've shown you how Searchlight disappoints attackers at every stage - before they're even inside the building.social
Intigriti on LinkedIn Two days in Haarlem with some of the most passionate people in the cybersecurity space.social
itsecuritynews.info AI penetration testing tools compared: what autonomous pentesting actually validates
More: itsecuritynews.info
@earanyash.bsky.social on Bluesky Fair - between Big Sleep and the autonomous pentest/CTF-bot pipelines, the tooling to find exploitable bugs fast has existed a while.
LocateRisk CVE-2026-109220: PHP Object Injection im WooCommerce-Plugin pdf-for-woocommercevendor
More: LocateRisk
Friday 30 October 2026
@aitoolstack.bsky.social on Bluesky curl shut its bug bounty in Jan 2025 largely over AI-written reports that didn't reproduce: discovery outpaced triage
Filigran on LinkedIn The people are what make Filigran a great place to work, day in and day out.social
Hackuity on LinkedIn Top to have participated in IT-SA 2026 in Nuremberg alongside Campus Cyber and the French delegation!social
insurancejournal.com Opterrix Launches AI-Powered Portfolio Management Workflow
Netcraft on LinkedIn Don't get caught using the same cybersecurity advice from five years ago.social
Phoenix Security on LinkedIn Phoenix Security | ASPM: Day one at Lonestar Application Security Conference (LASCON), done!social
Aikido Security Binance hack: how a compromised developer laptop can lead to a $6.3 billion breachvendor
Bitdefender on LinkedIn 🛡️ Cyber threats don't scale down just because your security team is small.social
Cyver on LinkedIn Luis Abreu Abreu and Ophélie are spending two days directly with the security community.social
Cyjax on LinkedIn Most organisations only discover what’s in there once something has already gone wrong.social
@paulirolla.bsky.social on Bluesky Bug bounty platforms are full of zero days found by agents now
Searchlight Cyber on LinkedIn In this week's Beacon learn more about the critical Brotli flaw Broccoli2Shell.social
ONYPHE on LinkedIn The scariest map on the Internet 🇫🇷 The scariest things aren’t always hiding in the dark.social
YesWeHack on LinkedIn We tested it on XSS and insecure deserialization labs to see how useful it really is.social
Autobahn Security on LinkedIn Autobahn Security | Reduce Hackability: Your WordPress is up to date.social
Thursday 29 October 2026
@carpeinferi.bsky.social on Bluesky Coming in hot with part two of the day with Forward (formerly Forward Networks) to talk about verified exposure management
@grape2024.bsky.social on Bluesky I Automated My Entire Bug Bounty Recon :One Script, Start to Finish Stop running 15 tools manually
Silobreaker on LinkedIn Intelligence only creates value when it reaches the right stakeholder in time to shape a decision.social
Heimdal on LinkedIn The virus on Mark's infected school laptop won't stop spreading because it's 9 p.m.social
Searchlight Cyber on LinkedIn Disappointment #29: every step they planned for ends in a dead end.social
Acronis on LinkedIn “Every new customer an MSP adds should be more profitable than the one before.”social
Red Sift on LinkedIn Setting up a mail server and hitting send doesn’t cut it anymore, for organizations of any size.social
Cyjax on LinkedIn We’re up for Cybersecurity Vendor of the Year at the MSP Channel Insights Awards!social
Bitdefender on LinkedIn Find out what’s behind the numbers in the 2026 Bitdefender Cybersecurity Assessment.social
Phoenix Security The AI Coding Assistant Is Spending Tokens to Find What The Scanner Already Foundvendor
ThingsRecon on LinkedIn ThingsRecon · Supply Chain Intelligence: The skills needed to attack are changing.social
Aikido Security Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving fastervendor
Patrowl on LinkedIn Cyber by Patrowl — Episode 10 What if part of your attack surface is hiding where you no longer look?social
CyberDart on LinkedIn It answers a specific question: how secure is this perimeter on the days of the test.social
G DATA CyberDefense on LinkedIn Last day at it-sa – Home of IT Security – time for a coffee with us?social
helpnetsecurity.com Qualys CISO on what security teams can do as exploit campaigns grow
@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1
Wednesday 28 October 2026
@snowwhitedreams0.bsky.social on Bluesky Checking out the Nexus CART repository on GitHub today
LocateRisk on LinkedIn What happens if security vulnerabilities are not in your own company, but with the service provider?social
@keroz.bsky.social on Bluesky AI and bug bounty: the discussion with Adrien Jeanneau, head of the triage team at YesWeHack. 🎧 Web: bit.ly/4eW7Fvo 🎧
Rapid7 Cybersecurity Blog How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
Holm Security on LinkedIn We’re pleased to be included in KuppingerCole Analysts' Leadership Compass for Attack Surface Management 2026.social
Tuesday 27 October 2026
@hendryadrian.bsky.social on Bluesky A bug bounty assessment of an unnamed cloud provider chained Kubernetes, control-plane and managed-service flaws to bypass tenant isolation
@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1
@OXENTechnology on X Your biggest cybersecurity risk may be something you don't even know exists.
@reconbee.bsky.social on Bluesky we explore External Attack Surface Management (EASM) and its growing importance in today’s cybersecurity landscape
LocateRisk on LinkedIn The first day of the it-sa – Home of IT Security 2026 is running at full speed and we are right in the middle of it!social
Pentest-Tools.com on LinkedIn You probably got into #cybersecurity because no two days look the same.social
Holm Security on LinkedIn The developer retired two years ago, and it’s been running quietly in the background ever since.social
@ralf-ladner.bsky.social on Bluesky Exposure Management for the proactive reduction of critical risks before hackers exploit them #AttackSurfaceManagement @Bitdefender_DE
@kazwan.bsky.social on Bluesky Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts TORRANCE, Calif., Oct
@stocktitan.net on Bluesky #TENB Tenable Selected by Atos to Power Continuous Threat Exposure Management Program...
LocateRisk on LinkedIn The doors of it-sa – Home of IT Security 2026 are open and we are ready for the rush!social
@undercodenews.bsky.social on Bluesky AI Is Accelerating Cyberattacks: Why Continuous Exposure Management Is Becoming Essential for Modern Security + Video Introduction: The Shift From...
cysmo on LinkedIn cysmo Cyber Risk Rating: ⚠️ PHP2Shell Update | CONFIRMED EXPLOITED | Who hasn’t patched yet?social
@pullrepo.bsky.social on Bluesky 🚀 Fastest-growing AI projects today: 1
Yogosha on LinkedIn And if your attack surface could be tested continuously, even while your teams are sleeping?social
ThingsRecon on LinkedIn ThingsRecon · Supply Chain Intelligence: Old domains do not retire themselves.social
Cyberwatch on LinkedIn 63 days. In 2018-2019, this was the average time between the release of a patch and the appearance of an exploit.social
Strobes Security Blog Best AI pentesting platforms for SOC 2 and PCI DSS compliance
UpGuard Blog What Is Dark Web Monitoring? | UpGuard
Monday 26 October 2026
Autobahn Security on LinkedIn Today the patch is out, and the first exploit attempts are already being seen.social
Strobes Security Blog Run pentests from Claude Code with the Strobes MCP servers
Filigran on LinkedIn Welcome to Filigran, Mathieu R., our new Chief Information Security Officer.social
Citalid on LinkedIn Cl0p doesn't pick a sector: it picks a flaw, then works through everyone exposed to it.social
Sunday 25 October 2026
Saturday 24 October 2026
Friday 23 October 2026
SOS Intelligence on LinkedIn Every excerpt on this page comes from our live collection: dark-web forums, markets and leak sites.social
KYND on LinkedIn AI is turning up everywhere, and application forms are struggling to keep up.social
Thursday 22 October 2026
Aikido Security Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)vendor
CyberVadis on LinkedIn Every company says its suppliers are secure.social
More: CyberVadis on LinkedIn
Aikido Security eMudhra CA compromise: eight private keys, and one of them is 4 - CVE-2026-111943vendor
G DATA CyberDefense PHP2Shell: What the security flaw means and why it must be patched immediatelyvendor
Mitigant on LinkedIn Our CEO Nils Karn and CTO Kennedy Torkura will be there and would welcome the chance to connect.social
Strobes Security Blog Introducing Red Loop: continuous, proven testing of your whole attack surface
Wednesday 21 October 2026
news.ycombinator.com Ask HN: How do you handle AI security for automated vulnerability management?
Horizon3 Audit-Ready Isn’t Attack-Ready.
thehackernews.com The Harness Is the Hard Part of Agentic Pentesting
Board of Cyber on LinkedIn Hacked refrigerators, destroyed goods: the cyber risk does not only affect data.social
G DATA CyberDefense aquaRömer relies on G DATA MXDR: "I have rarely experienced such a smooth introduction"vendor
helpnetsecurity.com DevGuard: Open-source vulnerability management for the software supply chain
Axonius Resources KuppingerCole Analysts Leadership Compass Attack Surface Management 2026
Tuesday 20 October 2026
CyberDart on LinkedIn 5 reasons to launch a bug bounty program if you have a large application surface!social
Board of Cyber on LinkedIn Today at 11 AM, we will see how to evolve the cyber evaluation of suppliers without multiplying the questionnaires and follow-ups.social
Monday 19 October 2026
Aleph Index on LinkedIn The following Tuesday at 3:12am, a hacker logged into the admin console with valid credentials.social
Blog - ThreatNG Security - External Attack Surface Management (EASM) - Digital Risk Protection - Security Ratings The End of Security Awareness: Why You Can't Train Away an Emotional Reaction
Saturday 17 October 2026
Friday 16 October 2026
Autobahn Security on LinkedIn Autobahn Security | Reduce Hackability: Attackers don’t start with your asset inventory.social
Board of Cyber on LinkedIn And if the security questionnaire was no longer the starting point of every supplier assessment?social
manilatimes.net ThreatBook Launches AI-Powered Pentest Aggregator, RedAgents
prnewswire.com ThreatBook Launches AI-Powered Pentest Aggregator, RedAgents
Thursday 15 October 2026
Empirical Security Kenna Is Sunsetting. Your Next Move Just Got Easier.
esecurityplanet.com Data Visibility Is Only Half the Job: How DSPM Helps CISOs Reduce Risk
bleepingcomputer.com Is AI pentesting as good as a human pentester?
Wednesday 14 October 2026
itsecuritynews.info The Blind Spots of Agentic Pentesting and How to Close Them
bleepingcomputer.com The Blind Spots of Agentic Pentesting and How to Close Them
globenewswire.com Tenable to Announce Fiscal Third Quarter 2026 Earnings Results
Zerocopter on LinkedIn After the great success of last year, the third edition of Hack050 will take place on Thursday, October 29!social
Tuesday 13 October 2026
globenewswire.com Tenable Announces Closing of New $400M Secured Revolving Credit Facility
bishopfox.com Attack Surface Discovery Datasheet
bishopfox.com Attack Surface Testing Datasheet
cloudtweaks.com From Vulnerability Management to Exposure Management
Monday 12 October 2026
Phoenix Security From 29,000 Findings to 516 Fixes: Why Vulnerability Management Must Move to Remediationvendor
Digital Shadows MCP Security: What Security Teams Need to Know About the New AI Attack Surfacevendor
Saturday 10 October 2026
Hackrate on LinkedIn Your attack surface doesn’t stop changing after a penetration test.social
More: Hackrate on LinkedIn
itsecuritynews.info Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
bleepingcomputer.com Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
cio.economictimes.indiatimes.com Scalefusion launches vulnerability management capability for Windows and macOS endpoints
Friday 9 October 2026
Autobahn Security on LinkedIn Autobahn Security | Reduce Hackability: “A big part of my job is deciding what code shouldn’t be written.” 💻social
Nanitor on LinkedIn Nanitor 7.3.0 is live 🚀 and the headline feature solves a problem every security team knows.social
Thursday 8 October 2026
itsecuritynews.info AI Spam Surge Forces Google to Pause Open Source Bug Bounty Program
Wednesday 7 October 2026
helpnetsecurity.com Edgescan Atomic validates attack paths with controlled AI testing
Strobes Security Blog Why your annual penetration test is already obsolete
Tuesday 6 October 2026
XRATOR on LinkedIn Tomorrow, October 7, the National Assembly begins examining the Resilience bill.social
Tenable News Feed Tenable Appoints Industry Veteran Charlie Bell to Board of Directors
Pentera Blog: Pentesting, Red Teaming & Security Pentera Named Among the Most Promising Solutions in Wavestone’s Landscape of Agentic AI Pentesting
cybersecuritynews.com Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management