Infoblox Introduces External Attack Surface Management and Supply Chain Intelligence

Infoblox entered the external attack surface management (EASM) market as part of its Exposure Management portfolio. The company said the move focuses on outside-in visibility into internet-facing assets and exposures that can involve critical vendors.

Infoblox framed the change around a time compression challenge for security teams, where reconnaissance, vulnerability identification and exploit creation historically took weeks and could take hours or minutes with “frontier AI.” It also tied the requirement for visibility to expanding hybrid and multi-cloud environments and to third-party dependencies.

The company’s External Attack Surface Management capability instantly discovers internet-facing assets without software installation, credentialed access or active scanning. Infoblox said it identifies and prioritizes exposures based on exploitability and business impact, including DNS hygiene issues. In an early access program, it reported identifying dangling CNAME records at 31 of roughly 40 participating organizations, and that nearly one-third of the records were “easy or trivial to take over.”

Infoblox also introduced Supply Chain Intelligence, which extends outside-in visibility from an organization’s own internet-facing assets to the internet-facing assets of critical vendors. It said the capability continuously monitors vendor exposures, leaked credentials, dark web activity and active threat campaigns to support security operations workflows. The company said External Attack Surface Management and Supply Chain Intelligence join Digital Risk Protection Services within the Infoblox Exposure Management portfolio.

“AI is forcing organizations to rethink how they manage cyber risk,” said Michelle Abraham, Research Vice President, Security and Trust, IDC. “As attackers automate reconnaissance and compress the time between exposure and exploitation, organizations need continuous visibility into their external attack surface and better context to prioritize the exposures that pose the greatest business risk. This is driving growing interest in preemptive approaches to external attack surface management as part of broader exposure management strategies.”

“The simple question every security leader should be able to answer is: ‘What can an attacker reach right now?’” said Mukesh Gupta, chief product officer at Infoblox. “As AI accelerates attacker reconnaissance, that question has become much harder to answer. With External Attack Surface Management, we’re applying Infoblox’s deep DNS expertise to help customers discover the internet-facing exposures that matter most before they become incidents. By extending that same outside-in approach to critical vendors through Supply Chain Intelligence, we’re helping organizations gain a more complete view of external risk. Combined with Digital Risk Protection Services, customers can not only identify emerging threats across their own environments and third-party ecosystem, but also take action to disrupt them before they become incidents. That’s what a more preemptive approach to cybersecurity looks like.”

Forward-looking statements were not provided in the supplied text.

Provided by Globe Newswire on behalf of Infoblox. Click to read original content. The original article was written by Decision Insights Editorial.