European Exposure Management Market

Thought leadership

Opinion and research from vendors and researchers that is not about a specific announcement.

Greenbone on LinkedIn · 4 Nov 2026

At it-sa – Home of IT Security , AI security came up at our stand again and again. People wanted to know what AI does for them in practice, and whether it can run on-premises. Our answer: use AI once, at the source, to build deterministic vulnerability tests.

Intigriti on LinkedIn · 4 Nov 2026

AI can help security teams and researchers find more potential issues faster. But more findings do not automatically mean more security. When finding bugs gets cheaper, the challenge shifts: which issues are real, exploitable, and worth fixing?

CovertSwarm on LinkedIn · 4 Nov 2026

Before you buy an agentic pentest, ask the vendor one question: what actually sits behind the demo? An attacker with a goal can cross your web app, your network, and your people in a single route. An AI that covers one of those shows you a fraction of your exposure.

YesWeHack on LinkedIn · 4 Nov 2026

How secure is your “long tail” of apps and APIs? 👉 https://lnkd.in/euqn_Uxh "Regular testing" and "testing after significant changes." Most frameworks and regulations expect both. But can you achieve that when pentests take months to schedule and provide results?

Raynet on LinkedIn · 4 Nov 2026

Our October #Vulnerability newsletter is out, highlighting a month of significant security developments and an evolving threat landscape, from rapidly exploited vulnerabilities to the growing role of AI in discovering zero-day flaws.

Pentest-Tools.com on LinkedIn · 3 Nov 2026

Every practitioner remembers the first time two small findings added up to something serious. That moment is the part of the job that's all yours.

Hadrian on LinkedIn · 3 Nov 2026

Frontier models can already hack. That part is no longer the question. The question is what separates a model that can run security tools from a system you would actually trust to pentest your environment. The answer has less to do with technical skill than most people expect.

Rootshell Security on LinkedIn · 3 Nov 2026

🚨 The EU Cyber Resilience Act isn't coming. It's already here. If you manufacture hardware, software, or connected devices for the EU market, the clock is ticking.

Outpost24 on LinkedIn · 3 Nov 2026

4,824 organizations. 31.5 million exposed credentials. Five industries. The new 2026 Credential Exposure Benchmark Report reveals the scale and nature of credential exposure across organizations in the US and Europe.

Intigriti on LinkedIn · 3 Nov 2026

When PHP2Shell was disclosed, the data told a story. 🧐 Across active programs, our global researcher community provided a unique view into how the vulnerability unfolded in real time, revealing patterns in researcher activity, organizational response, and security exposure.

Nordic Defender on LinkedIn · 3 Nov 2026

You have a web application your customers rely on—whether it’s your product, your customer portal, or part of the service you deliver. A new customer wants to move forward.

ThingsRecon on LinkedIn · 3 Nov 2026

Risk follows the connection. 🕸️ When the next critical vulnerability hits the news, how fast can you tell your board if you’re affected, and through which suppliers? A traditional security rating can’t answer that.

ONYPHE on LinkedIn · 2 Nov 2026

🧊 The cold chain is heating up. And not in a good way. 🚨 Today, according to The Guardian, supermarket chains across at least 7 European countries reported refrigeration system failures, with several confirming cyberattacks.

Kaduu on LinkedIn · 2 Nov 2026

🚨 ENGIE customer data exposure highlights the ongoing risks of third-party breaches and targeted phishing. 🌐 https://lnkd.in/gDU3Uphu #ENGIE #DataBreach #CyberSecurity #DarkWebMonitoring #ThreatIntelligence Try it for FREE. 🆓

Ethiack on LinkedIn · 31 Oct 2026

For CISOs and security leaders, manual pentesting and automated scanning have long forced a trade-off: coverage versus depth. Manual pentesting gives you deep, creative exploit analysis, but it's slow, expensive, and limited to a narrow scope on an annual cadence.

Edgescan on LinkedIn · 30 Oct 2026

Keeping up takes a team: continuous visibility to spot changes, vulnerability management to track issues, expert-led pen testing for depth and AI-powered pen testing between engagements. Each has a job. Together they give you a clearer picture of your security as things change.

Intruder on LinkedIn · 30 Oct 2026

There's a lot of debate around whether PHP2Shell is overhyped. So we tried exploiting it to find out. We went in skeptical. Early PoCs mostly didn’t work, and HTTP 500s kept getting passed off as RCE.

Raynet on LinkedIn · 30 Oct 2026

Are vulnerabilities hiding in your network? Discover to remediate now! 👻 Hidden vulnerabilities may be lurking in your IT environment, just waiting to spread terrible cyber threats.

Netcraft on LinkedIn · 29 Oct 2026

The best online digital risk protection providers combine broad monitoring across web services and other external channels with validated detection, risk prioritization, and effective disruption and takedown.

XRATOR on LinkedIn · 29 Oct 2026

Humans, the weak link in cybersecurity? I disagree. Yes, nearly 3 out of 4 hacks involve a human: a click, a reused password, an email too well imitated. This is what the Verizon report shows, which analyzed over 16,000 incidents.

Hadrian on LinkedIn · 29 Oct 2026

87,000+ vulnerability reports this year. Security teams are feeling the pressure. FD’s latest reporting highlights the challenge: as AI accelerates discovery, organizations need to understand which exposures put them at risk and what to fix first.

Ethiack on LinkedIn · 29 Oct 2026

On July 7, Claudia Buch, Chair of the ECB's Supervisory Board, signed a letter ordering every significant eurozone bank to produce an action plan against AI-class cyberattacks by October 31.

Greenbone on LinkedIn · 28 Oct 2026

Patching PHP2Shell is simple. Finding every PHP installation that needs the patch is the hard part. CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution in PHP (CVSS 9.2).

Filigran on LinkedIn · 28 Oct 2026

This summer, around 1,200 AI agents found their way out of a test environment while chasing the system that graded their test. Julien Richard , Filigran's CTO and co-founder, points defenders to a quieter part of that story, where the signals were there all along and twice…

Nordic Defender on LinkedIn · 28 Oct 2026

One holding company. Multiple subsidiaries. Different products, release cycles, and security needs. They don’t all need the same engagement model.

Filigran on LinkedIn · 27 Oct 2026

Attackers don't follow a script. Find a password, and they try it on web apps, cloud accounts and Active Directory. Find a WordPress site, and they probe it for WordPress flaws. Most security testing still runs one scripted step at a time.

Holm Security on LinkedIn · 27 Oct 2026

Did you patch the tool someone wrote in 2002? You know the one. The developer retired two years ago, and it’s been running quietly in the background ever since. If you hesitated, that’s the real #PHP2Shell problem. Updating PHP is easy: one update, one redeploy.

cysmo on LinkedIn · 27 Oct 2026

⚠️ PHP2Shell Update | CONFIRMED EXPLOITED | Who hasn’t patched yet? 🛠️Last week: patch released. 🚨 Yesterday: CISA added PHP2Shell to its Known Exploited Vulnerabilities (KEV) catalog. This is no longer a “potential” threat. It’s confirmed.

Rootshell Security on LinkedIn · 27 Oct 2026

Human expertise makes the difference. AI is changing the way organizations approach cybersecurity, helping security teams work faster, analyze more data, and identify potential vulnerabilities at scale. But technology alone doesn't tell the whole story.

ThingsRecon on LinkedIn · 27 Oct 2026

Old domains do not retire themselves. A campaign ends, a brand changes, or a business unit closes. The domain can still resolve, route traffic, expose a service or point back to current infrastructure. That keeps yesterday’s asset inside today’s attack surface.

CyberDart on LinkedIn · 27 Oct 2026

The 4 objections we hear most from Italian companies. In recent years we have spoken with hundreds of Italian companies and many have told us no. These are the objections that recur most often: 1. "We are already covered" This is the most frequent.

Cyberwatch on LinkedIn · 27 Oct 2026

63 days. In 2018-2019, this was the average time between the release of a patch and the appearance of an exploit. Today, this period has turned negative: for exploited vulnerabilities, the exploit circulates on average before the patch is even available.

Nanitor on LinkedIn · 26 Oct 2026

If everything is urgent, nothing is. That’s the problem with one ticket per #CVE . One flaw can hit many devices, and one device can carry many flaws, so the tickets multiply until engineers stop reading them.

ONYPHE on LinkedIn · 26 Oct 2026

🪘 New article on our blog. 🇬🇧 What if your fridge was revealing a little too much online? Following our Danfoss investigation, we used ONYPHE to explore the exposure of Copeland/Dixell refrigeration monitoring systems.

Detectify on LinkedIn · 21 Oct 2026

"The oldest versions matter most because they won't be fixed." Our Security Research team spoke with Forbes about today’s critical PHP patches. While updates are dropping for PHP 8.2+, the real risk lies in forgotten, unmonitored legacy environments running older versions.

LocateRisk on LinkedIn · 21 Oct 2026

At 16:00 CET today, the PHP emergency release is coming. Sansec expects mass attacks shortly after publication. The vulnerabilities CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 each) potentially allow for unauthenticated remote code execution (RCE).

Board of Cyber on LinkedIn · 21 Oct 2026

Hacked refrigerators, destroyed goods: the cyber risk does not only affect data. On October 14 in Tech&Co on BFM Business, Christophe Aulnette, chairman of Board of Cyber, talked about the cyberattack that affected the refrigeration equipment of French supermarkets.

Cyberwatch on LinkedIn · 21 Oct 2026

⏱️ Cyber Resilience Act: 24 hours to give the alert. Are you ready? Since September 11, manufacturers of digital products sold in the EU must report any actively exploited vulnerabilities to authorities, with the first alert within 24 hours.

Nanitor on LinkedIn · 20 Oct 2026

Richard Daly , our Partner Lead for UK & Ireland, has written up the five problems he sees most often in MSP vulnerability services, and how to fix each one: 1. Tools built for one company, not many clients 2. One ticket per CVE, until the service desk drowns 3.

CyberDart on LinkedIn · 20 Oct 2026

5 reasons to launch a bug bounty program if you have a large application surface! If you manage many different domains, subdomains, and applications, you probably already know: a punctual test every now and then is not enough, because the surface changes faster than you can…

Aleph Index on LinkedIn · 19 Oct 2026

The deal was signed on a Friday at 5pm. The following Tuesday at 3:12am, a hacker logged into the admin console with valid credentials. No alert!

Saporo on LinkedIn · 1 Oct 2026

"Let's show infrastructure teams what their environments look like in the eyes of the attacker." Our CEO Olivier Eyries opened the new European season of the Cyber Security District Podcast.

Thought leadership

Get in touch