Cybersecurity
Group-IB Launches Attack Surface Management to Counter Shadow IT Risks
Group-IB’s new Attack Surface Management tool helps defenders map and secure external assets, mitigating shadow IT risks. It integrates with existing security stacks and delivers real‑time threat intelligence. Defenders should assess their external footprint, enforce policies, and monitor for anomalies.
What happened
Group-IB released an Attack Surface Management (ASM) module within its Unified Risk Platform to give organizations visibility into external assets that are often overlooked by traditional security tools.
Impact
Shadow IT—unauthorized cloud services, SaaS apps, and third‑party APIs—can expose data and provide footholds for attackers. ASM catalogs these assets, flags misconfigurations, and correlates them with threat intelligence to highlight high‑risk exposures.
What to do
- Run a full external asset inventory using ASM to surface unknown services.
- Integrate ASM feeds with your SIEM or SOAR to trigger alerts on newly discovered or misconfigured assets.
- Apply hardening policies: enforce least‑privilege, secure API keys, and regular configuration reviews.
- Schedule quarterly reassessments to track changes in the external attack surface.
Additional resources
Group-IB’s ASM is part of the Unified Risk Platform, which also offers Threat Intelligence, Fraud Protection, and Digital Risk Protection modules.
Related articles
Group-IB Launches Managed XDR: Unified Risk Platform for Rapid Incident Response
Group-IB has introduced Managed XDR, an all-in-one cybersecurity platform that consolidates threat intelligence, attack surface management, and incident response into a single interface. The solution offers 24/7 global support and real‑time network event analysis, enabling defenders to detect and stop attacks faster. Security teams should evaluate integration with existing tools and enable the platform’s automated response workflows.
Read briefing
Group-IB Expands Cybercrime Intelligence Operations in Latin America
Group‑IB has launched a focused intelligence program to counter rising cybercrime in Latin America, highlighting local threat actors and tactics. The initiative offers a Unified Risk Platform and threat‑intelligence services to help SecOps teams detect, prevent, and respond to fraud, ransomware, and brand abuse. Defenders should integrate Group‑IB solutions, monitor regional threat feeds, and adopt the platform’s attack‑surface and digital‑risk protection modules.
Read briefing
Rapid7 Partners with Licencias OnLine to Expand AI‑Driven Security Ops in Latin America
Rapid7 has partnered with Licencias OnLine to bring its AI‑powered security operations platform to Latin America, enabling organizations to unify exposure management, threat detection, and automation across endpoints, cloud, identity, and infrastructure. The partnership focuses on eliminating blind spots such as Shadow IT and Shadow AI while supporting rapid digital transformation. Defenders should assess current coverage, integrate the platform, and leverage local expertise for accelerated deployment.
Read briefing
Group-IB Unveils Unified Risk Platform to Detect Hidden Threats
Group-IB’s new Unified Risk Platform consolidates threat intelligence, attack surface management, and XDR into a single solution, enabling defenders to spot overlooked vulnerabilities and malicious activity. The platform offers real‑time alerts, automated remediation, and integration with existing SOC tools.
Read briefing