Attack Path Management

At least two threat actors have weaponized a novel evasion technique called OAuth client ID spoofing in multiple cloud campaigns. The post OAuth client ID spoofing silently validates stolen Microsoft Entra ID credentials appeared first on XM Cyber.

Drive efficient and effective exposure remediation with the evidence required to overcome the burden of proof The post Closing the Gap Between Exposure Discovery & Remediation appeared first on XM Cyber.

The cybersecurity market is reactively panicking about automated vulnerability identification and autonomous AI exploit builders. With the emergence of automated toolsets like Anthropic’s Claude… The post Capitalize on Mythos Hype to Fix Your Exposure and Vulnerability Management appeared first on XM Cyber.

Traditional security models cannot keep pace with AI-speed threat activity. However, the surge in boardroom focus on AI cyber risks- like Claude Mythos Preview… The post Are You Leveraging Boardroom AI Hype to Get Buy-In for Exposure Management? appeared first on XM Cyber.

For 19 years, every edition of the Verizon DBIR told the same story about initial access – credential theft was the number one entry… The post The 2026 Verizon DBIR Stopped Asking How Attackers Get in and Started Asking Where They Go appeared first on XM Cyber.

The system was already under strain before Mythos arrived on the scene. But regardless of whether Claude Mythos lives up to the hype, our customers… The post Did AI kill vulnerability management—or just expose its flaws? appeared first on XM Cyber.

A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerabilities. The post macOS Weaknesses Chained to Silently Disable Endpoint Security Agents appeared first on XM Cyber.

Security firm XM Cyber found a macOS technique that can let standard user accounts disable some enterprise security tools without administrator credentials. The post New macOS security flaw could let hackers disable protection tools, researchers say appeared first on XM Cyber.

Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel exploits. The post Apple’s MacOS Gap Lets Users Disable Security Tools appeared first on XM Cyber.

On-Demand Technical Session | Originally Presented at the US Gartner Security & Risk Management Summit, 2026 The post Stop Legacy Infrastructure From Hijacking Your AI Agents appeared first on XM Cyber.