Novee puts forgotten internet-facing assets through penetration testing

Novee’s Ex­ter­nal Sur­fa­ce Tes­ting is a new ca­pa­bi­lity in its AI pe­ne­tra­tion tes­ting plat­form that helps se­cu­rity teams dis­co­ver in­ter­net-fa­cing as­sets and va­li­da­te ex­ploi­ta­ble vul­ne­ra­bi­li­ties. It tests newly dis­clo­sed CVEs and fin­dings im­por­ted from third-party ex­ter­nal at­tack sur­fa­ce ma­na­ge­ment (EASM) tools. “At­tac­kers don’t limit them­sel­ves to the ap­pli­ca­tions you’re al­ready tes­ting. They look for anything ex­po­sed to the in­ter­net – for­got­ten sub­do­mains, sta­ging ser­vers left on­li­ne, and in­fras­truc­tu­re your team may not even know exists. … More → The post Novee puts for­got­ten in­ter­net-fa­cing as­sets th­rough pe­ne­tra­tion tes­ting ap­pea­red first on Help Net Se­cu­rity .