Zafran Named Youngest Overall Leader in the 2026 KuppingerCole Leadership Compass for Attack Surface Management

Blog

Research, product news and practical guidance on exposure management, CTEM and vulnerability prioritization.

Latest · Blog

Zafran recognized as an Overall, Product, and Innovation Leader in KuppingerCole’s 2026 Leadership Compass

Nov 5, 2026

All posts

Blog
Zafran recognized as an Overall, Product, and Innovation Leader in KuppingerCole’s 2026 Leadership Compass
Nov 5, 2026
Blog
JPMorganChase’s “200 Days Into the Frontier” and what it means for exposure management
Nov 3, 2026
Blog
Context mismatch: Eliminating non-exploitable CVEs from the queue
Oct 29, 2026
Blog
After PHP2Shell: How CISOs can be ready for the next zero-day
Oct 27, 2026
Blog
PHP2Shell: Everything you need to know about the two critical PHP vulnerabilities
Oct 21, 2026
Blog
Bank of America put 1,000 contractors on Mythos patching. Most teams can’t do that.
Oct 16, 2026
Blog
Zafran and Athena: Turning the first wave of AI-discovered vulnerabilities into protection
Sep 29, 2026
Blog
Zafran recognized in two 2026 Gartner® Emerging Tech reports for unified exposure management platforms and autonomous exposure remediation categories
Sep 22, 2026
Blog
Agentic asset ownership: Automating for faster remediation
Sep 1, 2026
Blog
The attacker's escape room: Why defenders have been fighting the wrong game
Aug 20, 2026
Blog
Inside OpenAI's Black Hat talk: What the Hugging Face incident teaches defenders about attack chains
Aug 10, 2026
Blog
Understanding CTEM vs EASM vs BAS: A practical guide for your vulnerability program
Aug 5, 2026
Blog
Zafran launches Attack Chain Killswitch in collaboration with Google Threat Intelligence
Aug 3, 2026
Blog
FaceHugger: Vulnerabilities in Hugging Face Diffusers open door to supply chain attacks on enterprise AI
Jul 27, 2026
Blog
Cyber insurers are now underwriting your vulnerability response speed
Jul 13, 2026
Blog
BOD 26-04 gets prioritization right - but it's only half the answer
Jul 9, 2026
Blog
Zafran joins the Athena Coalition to defend against frontier AI attack chains
Jul 7, 2026
Blog
DifyTap: Zafran discovers how attackers can silently wiretap AI data across tenants on a platform powering 1M+ apps
Jun 22, 2026
Blog
CISA's BOD 26-04 signals the end of patch-everything
Jun 15, 2026
Blog
Zafran accepted into Anthropic's Cyber Verification Program
Jun 12, 2026
Blog
OpenAI selects Zafran for Trusted Access for Cyber
Jun 8, 2026
Blog
Patches take weeks. Exploits take hours. The 2026 DBIR makes the math brutal.
May 20, 2026
Threat Research
Financial services threat landscape 2026
May 18, 2026
Blog
Google confirms AI built a zero-day for mass exploitation
May 14, 2026
Blog
Introducing the Zafran Zero Day Agent: An autonomous workflow for the post-Mythos era
May 7, 2026
News
Zafran launches Zafran AIR, a rapid-response offering to help enterprises build AI resilience for the post-Mythos eras
Apr 28, 2026
Blog
NVD pulls back on enrichment: How defenders cope with less vulnerability context
Apr 24, 2026
Blog
Assume every vulnerability will be exploited. FS-ISAC's post-Mythos mandate.
Apr 22, 2026
Blog
JPMorgan's Mythos memo is the one you should actually read
Apr 20, 2026
Blog
Your board is going to ask about Mythos. Here's exactly what to say.
Apr 16, 2026
Blog
Gartner Reviewed 150 Startups in Exposure Management. Only Zafran Covers the Full Lifecycle
Apr 9, 2026
Blog
After Mythos: Preparing for cybersecurity’s Manhattan Project moment
Apr 8, 2026
Blog
Introducing the Zafran Exposure Gateway: A secure control plane for AI agents to eliminate exposures at scale
Mar 24, 2026
Blog
Gartner: CVSS-based prioritization leaves organizations overexposed - here's what to do instead
Mar 11, 2026
Blog
Widening the attack surface: Iran’s expanding cyber activities in retaliation to the American-Israeli campaign
Mar 4, 2026
News
Zafran announces strategic investment from Amex Ventures
Feb 24, 2026
Blog
The “agentic trojan horse” debate: How OpenClaw’s convenience model opens real-world attack paths
Feb 17, 2026
Blog
Beyond prompt injection: Over-connected AI apps enable enterprise breaches
Jan 28, 2026
Threat Research
ChainLeak: Critical AI framework vulnerabilities expose data, enable cloud takeover
Jan 20, 2026
Blog
No CVE, no problem? The dangerous blind spot in AI security
Jan 13, 2026
Blog
The 2025 spike in vulnerabilities isn't the full story
Jan 8, 2026
Blog
Will AI revolutionize vulnerability exploitation?
Jan 6, 2026
Blog
Introducing Agentic Exposure Management
Dec 2, 2025
Blog
Zafran triples ARR in $60M round to reinvent exposure management with agentic AI
Dec 2, 2025
Blog
Zafran awarded prestigious “Honorable Mention” in Gartner Magic Quadrant for Exposure Assessment Platforms
Nov 11, 2025
Blog
How to detect and mitigate the critical WSUS exploit (CVE-2025-59287)
Oct 26, 2025
Blog
Agentic Remediation™ unlocks a new approach to solving enterprise vulnerabilities
Sep 15, 2025
Blog
Beyond the hype: Remediation Operations that delivers results
Aug 21, 2025
Blog
Introducing the Zafran Detector
Aug 5, 2025
Blog
Mobilizing rapid response to the SharePoint crisis
Jul 23, 2025
Blog
⁠Iran poised for a digital counterstrike: A practical guide to reduce your exposure
Jun 23, 2025
Blog
Defending what matters: A practical guide to modern threat hunting
May 14, 2025
Blog
Introducing Remediation Operations (“RemOps”)
Apr 28, 2025
Blog
Why CVSS scores are dead to me
Mar 27, 2025
Blog
We are not patching our way out of this mess
Mar 6, 2025
Blog
Understanding the role of mitigation in cybersecurity
Mar 5, 2025
Blog
Black Basta exposed: How a ransomware cartel exploits vulnerabilities
Feb 25, 2025
Blog
Feature spotlight: Exposure Tracker
Feb 19, 2025
Blog
From playbook to protection: What football can teach us about CTEM
Feb 6, 2025
Blog
Strategies for improving mitigation & remediation - vuln management survival guide
Feb 4, 2025
Blog
Strategies for improving communication - vuln management survival guide
Jan 29, 2025
Blog
Strategies for improving assessment & prioritization - vuln management survival guide
Jan 21, 2025
Blog
The TL;DR of the latest cybersecurity executive order
Jan 16, 2025
Blog
Strategies for improving detection - vuln management survival guide
Jan 14, 2025
Blog
Vulnerability exploitation in 2024
Jan 8, 2025
Blog
Strategies for improving governance and compliance - vuln management survival guide
Jan 7, 2025
Blog
From reactive to proactive: Threat hunting in the cybersecurity battlefield
Dec 18, 2024
Threat Research
BreakingWAF: Widespread WAF bypass impacts nearly 40% of Fortune 100 companies
Dec 3, 2024
Threat Research
BreakingWAF technical analysis
Dec 3, 2024
News
Microsoft cloud environments under active exploitation by a campaign utilizing access from on-prem accounts - hunt and mitigate
Oct 1, 2024
Blog
Flax Typhoon: A Chinese state-sponsored group exploiting 66 vulnerabilities to build a 260k device botnet
Sep 22, 2024
Blog
Introducing Proactive Exposure Hunting, the latest enhancement to Zafran’s threat exposure management platform
Aug 4, 2024
Blog
Crowdstrike issue causes global scale outages
Jul 19, 2024
Blog
RegreSSHion: RCE vulnerability in OpenSSH exposes millions of servers
Jul 2, 2024
Blog
Zafran and Recorded Future: Mitigating risk exposure with actionable threat intelligence
Jun 6, 2024
Video
Zafran at RSA 2024
May 21, 2024
Blog
State actor or cybercrime? The story of IntelBroker, the most under-rated threat actor
Apr 25, 2024
Blog
Supply chain shock: the XZ Utils backdoor and the operation that was revealed too early (or too late?)
Apr 8, 2024
Video
Put your defense on offense
Apr 2, 2024
Blog
Evolving from exploit mitigations to enterprise mitigations
Mar 28, 2024
Blog
Introducing Zafran: The risk & mitigation platform
Mar 28, 2024
Blog
Standing on the shoulders of failure: Why we started Zafran
Mar 28, 2024
News
Zafran emerges from stealth with over $30M as the first risk and mitigation platform to fight threat exploitation
Mar 28, 2024

See Zafran in action

Prioritize and fix what is truly exploitable using risk context from your existing security tools.