Flashpoint promotes EASM module that links external asset discovery to threat-informed vulnerability prioritization
Flashpoint published a vendor blog post describing its External Attack Surface Management (EASM) module, which continuously discovers internet-facing assets and maps them to Flashpoint Vulnerability Intelligence. The company says its intelligence covers more than 480,000 vulnerabilities, including over 105,000 not found in NVD or CVE. Findings are prioritized with Flashpoint KEV, EPSS and a patented Ransomware Risk model. The article is product marketing and reports no incident, vulnerability or threat actor activity. It argues that unknown assets, such as forgotten staging servers and infrastructure inherited through acquisitions, create exposure that traditional inventories miss.
Detalhes técnicos
- EASM discovers domains, subdomains, IP addresses and untracked infrastructure, and places them in a triage queue ordered by relevance.
- After ownership is confirmed, assets are matched to vulnerabilities by software version. Asset-level views show the products and versions responsible, plus high-risk open ports such as RDP and SSH.
- A Vulnerable Assets view shows how many vulnerabilities are tied to each asset, so teams can spot compound risk.
- EASM is offered as a module inside the Flashpoint Ignite platform and is priced by company size.
Remediação
- Continuously discover external assets, including those from acquisitions, forgotten staging environments and cloud instances left running after projects end.
- Confirm ownership of newly discovered assets, then prioritize fixes using evidence of active exploitation (KEV), EPSS and ransomware risk.
- Review exposed high-risk services such as RDP and SSH.
Linha do tempo
-
Flashpoint promotes EASM module that links external asset discovery to threat-informed vulnerability prioritization
ler a análise desta fonte ocultar
Flashpoint published a vendor blog post describing its External Attack Surface Management (EASM) module, which continuously discovers internet-facing assets and maps them to Flashpoint Vulnerability Intelligence. The company says its intelligence covers more than 480,000 vulnerabilities, including over 105,000 not found in NVD or CVE. Findings are prioritized with Flashpoint KEV, EPSS and a patented Ransomware Risk model. The article is product marketing and reports no incident, vulnerability or threat actor activity. It argues that unknown assets, such as forgotten staging servers and infrastructure inherited through acquisitions, create exposure that traditional inventories miss.
Technical Details
- EASM discovers domains, subdomains, IP addresses and untracked infrastructure, and places them in a triage queue ordered by relevance.
- After ownership is confirmed, assets are matched to vulnerabilities by software version. Asset-level views show the products and versions responsible, plus high-risk open ports such as RDP and SSH.
- A Vulnerable Assets view shows how many vulnerabilities are tied to each asset, so teams can spot compound risk.
- EASM is offered as a module inside the Flashpoint Ignite platform and is priced by company size.
Remediation
- Continuously discover external assets, including those from acquisitions, forgotten staging environments and cloud instances left running after projects end.
- Confirm ownership of newly discovered assets, then prioritize fixes using evidence of active exploitation (KEV), EPSS and ransomware risk.
- Review exposed high-risk services such as RDP and SSH.