A new era for Searchlight Cyber starts today. We’re launching our Preemptive Threat Exposure Management (PTEM) platform alongside a brand-new corporate identity & website. Learn how we’re helping organizations stay ahead of attackers. slcyber.io #PreemptiveSecurity

The average org can see around 62% of its external attack surface. The other 38% is the subsidiary acquired three years ago, the test environment nobody shut down, the SaaS deployment on a corporate subdomain.
eu1.hubs.ly/H0zl_dv0 #31DaysofDisappointment

The curl project shut down its bug bounty after 95% of its 2025 submissions turned out to be invalid. AI is flooding defenders with reports, and the real vulnerabilities are buried in the pile. #31DaysofDisappointment eu1.hubs.ly/H0zl-nl0

Our researchers used AI to find wp2shell, an unauthenticated remote code execution chain in WordPress Core. It took about 10 hours and roughly $25 in compute. Attackers can run the same playbook. The only question is who gets there first. eu1.hubs.ly/H0zlG4J0

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - helpnetsecurity.com/2026/10/22/php… - @SLCyberSec #PHP #CyberSecurity #CyberSecurityNews #vulnerability #CVE

PHPShell shows how far attack timelines have collapsed. Mandiant's M-Trends 2026 puts mean time to exploit at -7 days - attackers often strike before a patch exists. Check your exposure with our high-fidelity detection tool: eu1.hubs.ly/H0zjv-Z0

We've released our high-fidelity scanner for #PHP2shell going beyond version checks with a progressive detection mechanism for fewer false positives/negatives:

🔗 Scanner: github.com/assetnote/php2…

📖 Details: slcyber.io/research/high-…

Our new report, AI vs. the Patch Window: What Has Changed, and What Hasn't, cuts through the hype and examines the impact of AI accelerating vulnerability discovery, exploitation and disclosure.
Download the report here: eu1.hubs.ly/H0zgN-Q0

The average vendor scans your attack surface once a day. Searchlight scans it every hour - 96% faster than other vendors at closing the gap between exposure and resolution. Disappointment #20: Stop giving attackers a 23 hr headstart. eu1.hubs.ly/H0zdQnp0

Gartner expects half of all security spend to shift to preemptive approaches by 2030. The teams making that shift early aren't waiting, they're closing the gap now, before it's the default expectation.

Some of our customers trust Searchlight's signal enough to route critical findings straight to engineering, no human triage in between. That's what happens when validation is strong enough that a human check is the slow step, not the safe one. eu1.hubs.ly/H0z6wH60

“Important as response is, it still accepts an attacker getting there first.” - Michael Gianarakis, CEO, Searchlight Cyber. Preemptive security asks: how do we spot exposure and threats early enough to change the outcome? Get the handbook: eu1.hubs.ly/H0z6vgN0

“It’s harder to understand what your true attack surface is.” That’s the reality of inflated asset counts. Use our free ASM Noise Calculator to see an illustrative estimate of how much noise your asset count is hiding. eu1.hubs.ly/H0z7dc40

Based on analysis of our customers’ attack surface, the average org spends 80-90% of their ASM contract on noise – inflated asset counts that result in low-signal alerts. Run our ASM Noise Calculator, to see how much of your ASM budget is spent on noise: eu1.hubs.ly/H0z66T20

New research from our team: we chained an unauthenticated bulk import, an XXE buried in a nested dependency and leaked IMS credentials into full pre-auth RCE on Adobe Experience Manager Cloud.

We also cover how AI models helped (and didn't) during the audit.
Y

Why do so many security teams still treat "tickets closed per analyst" as a badge of honor? Use our ASM waste calculator to estimate how much of your analyst time is spent on triaging noise. eu1.hubs.ly/H0z3ZrZ0

Most security programs still treat every exposure as equal. Is it exploitable in practice? Is it reachable from the outside? Does it lead somewhere valuable? That's the filter. eu1.hubs.ly/H0z06Md0 #31DaysofDisappointment

Preemptive Threat Exposure Management rests on three pillars. Miss one and the other two fall short. Get all three working together and an attacker can't win by getting lucky with a single gap. See how they fit together: eu1.hubs.ly/H0z03ZK0 #31DaysofDisappointment

“Breach is inevitable” is a security cliché. Most attacks follow a predictable chain, and predictable chains can be broken.
Find the exposure, confirm it’s exploitable, close it before it’s used.
Free handbook: eu1.hubs.ly/H0yYHMZ0

Alerts handled. Patches applied. Tickets closed. None of it proves you’re safer. The Preemptive Cybersecurity Handbook gives you metrics that reward the behaviors that actually disappoint attackers. eu1.hubs.ly/H0yYxpJ0 #31daysofDisappointment

Attackers don’t read your risk register. They test paths to see what actually works. Most security programs never run that test themselves.
Run it first. Fix only what’s genuinely exploitable. That’s how you disappoint them. eu1.hubs.ly/H0yYvbK0 #31daysofDisappointment