Research

Emerging Security Issue: SonicWall SSLVPN (CVE-2024-40766)

Emma-Zaballos
By Emma Zaballos
Product Marketing Manager
September 10, 2024

CVE-2024-40766 is a critical (CVSS v3 score: 9.3) access control flaw affecting SonicWall firewall devices that attackers are actively exploiting to deliver ransomware. CyCognito discovery and testing engines detect all assets running SonicWall SonicOS products and leverage multiple tests to services of the vulnerable product and versions. All customers have access to an in-platform emerging security issue announcement as of September 10th, 2024.



Products

Optimizing Asset Management and Incident Response: CyCognito’s New Integration with ServiceNow CMDB

Ansh-Patnaik
By Ansh Patnaik
Chief Product Officer
August 21, 2024

CyCognito’s new certified integration with ServiceNow’s Configuration Management Database (CMDB) enhances asset visibility and streamlines management to bolster cybersecurity defenses. By synchronizing CyCognito assets with ServiceNow Configuration Items (CIs), the integration ensures that the CMDB remains current, enabling quicker assessment and response to potential threats. This integration is particularly valuable for organizations aiming to standardize asset management and security operations on the ServiceNow platform.



Perspectives

A Recent Interview Uncovers How Berlitz Corporation Reduced Critical Alerts by 86% and Saved 100K with CyCognito

Brittany-Busa
By Brittany Busa
Customer Marketing and Advocacy Lead
July 22, 2024

I recently sat down with Daniel Schlegel, the Global Chief Information Officer (CIO), Chief Security Officer, and Chief Privacy Officer of Berlitz Corporation, a global leader in language training and cultural education, to hear about their transformative experience using CyCognito to gain global external attack surface visibility, reduce costs, and enhance their security posture.



Products

What’s the buzz about NIS 2?

Jason-Pappalexis
By Jason Pappalexis
Sr. Technical Marketing Manager
July 15, 2024

NIS 2 deadline is October 2024, but many are challenged to implement. CyCognito provides risk-based insight that speeds your alignment with NIS 2.



Products

Worum geht es bei NIS 2?

Jason-Pappalexis
By Jason Pappalexis
Sr. Technical Marketing Manager
July 15, 2024

Die Frist für NIS 2 endet im Oktober 2024: Auch wenn es in vielen Mitgliedsstaaten noch länger dauert, bis diese Direktive in lokale Gesetze gegossen sein wird, beginnen doch schon viele betroffene Unternehmen mit der Planung bzw. Umsetzung der für sie passenden Maßnahmen. CyCognitos umfassende External Attack Surface Risk Management Plattform kann die Umsetzung wichtiger Bestandteile der NIS 2 Richtlinie beschleunigen.. Dieser Blog ist eine passende Lektüre für alle, die sich mit dem Verständnis der NIS 2-Anforderungen und der Suche nach dem schnellsten Weg zur Erfüllung dieser Anforderungen beschäftigen.



Products

Polyfill.io and Software Supply Chain Security: A Cautionary Tale

Ansh-Patnaik
By Ansh Patnaik
Chief Product Officer
July 8, 2024

This blog post discusses a recent software supply chain attack that targeted the popular JavaScript service, Polyfill.io. The attack highlights the importance of software supply chain security and provides how CyCognito can help identify third-party libraries to mitigate exposed vulnerabilities.



Perspectives

Recent Interview Reveals How Asklepios Kliniken GmbH Improves Risk Exposure with CyCognito

Brittany-Busa
By Brittany Busa
Customer Marketing and Advocacy Lead
July 1, 2024

I recently sat down with Daniel Maier-Johnson, the Chief Information Security Officer (CISO), and Markus Diehm, Cybersecurity Analyst, with Asklepios Kliniken GmbH, Germany’s second-largest private healthcare provider, to hear about their experience using CyCognito to gain continuous monitoring, prioritize cyber risks, and safeguard patient information.



Products

Stop Remediating Backward – Reactive Approaches Aren’t a Long-Term Solution

Jason-Pappalexis
By Jason Pappalexis
Sr. Technical Marketing Manager
June 17, 2024

SecOps is often challenged to prioritize issues efficiently. CyCognito delivers the accuracy, coverage, and frequency for confident remediation.



Featured, Research

Web Application Security Testing: Struggles, Shortfalls and Solutions

Graham-Rance
By Graham Rance
Interim Head of Sales Engineering
June 3, 2024

A survey of cybersecurity professionals in the U.S. and U.K. reveals challenges in web application security testing. Key findings include extensive attack surfaces due to numerous in-house and third-party applications, frequent security incidents, concerns about the effectiveness of existing tools, and inadequate testing coverage. Additionally, over half of respondents struggle to remediate discovered vulnerabilities. These findings highlight the need for improved web application security testing strategies.



Featured, Research

The Biggest Security Nightmares from 2023 and How They Could Ruin Your 2024

Emma-Zaballos
By Emma Zaballos
Product Marketing Manager
May 15, 2024

CyCognito shares insights showing how security teams can learn from previous incidents and leverage exposure management techniques to stay ahead of attackers.




Topics



Search the Blog



Featured Posts








Top Tags



CyCognito Research Report

State of External Exposure Management, Summer 2024 Edition

State of External Exposure Management, Summer 2024 Edition

Download the report now to stay ahead of emerging threats and strengthen your organization’s security posture for 2024.

O'Reilly Report

Moving from Vulnerability Management to Exposure Management

Moving from Vulnerability Management to Exposure Management

Download the report to learn about the historical trends behind the emergence of exposure management, how to develop a strategic plan and assemble a team to smoothly transition frameworks, and example tech stacks to consider for your organization.

Request a Free Scan

See Exactly What Attackers See

Get a Free Scan of Your Attack Surface

Get a free scan of your attack surface and gain valuable insight into your organization's risk posture by allowing CyCognito to discover, contextualize, and test externally exposed assets on a portion of your parent company or a single subsidiary.