Le Lézard
Classified in: Science and technology
Subject: PDT

XM Cyber Counters Attacks Involving Microsoft Active Directory Exploits

First Solution to Reveal Entire Attack Paths Across AD and Other Vectors, Aiding Remediation and Continuously Protecting Critical Assets

HERZLIYA, Israel, May 24, 2022 /PRNewswire/ -- XM Cyber, the multi-award-winning attack path management company, announced today a new security capability for Microsoft's Active Directory (AD). XM Cyber is the first in the industry to link the use of AD into the entire attack path, bringing multiple attack techniques together and offering a complete and accurate view of an organization's cybersecurity risk, across on-prem and cloud environments. With this new capability, enterprises gain end-to-end attack path visualization for easy understanding and prioritized remediation of all weaknesses before an attack can take place.

A chain of attack vectors (vulnerabilities, misconfigurations, user privileges, human errors, etc.) that enables lateral movement through an organization's network is called an attack path. Once an attacker is inside the network, they can move laterally, escalating their privileges and targeting systems to gain access to sensitive data and business-critical resources, and even gain access to the cloud environment by moving from a compromised enterprise AD user to the associated Azure AD user.      

AD is widely used by enterprises around the world (including approximately 90% of Global Fortune 1000 companies) to connect and manage endpoints inside corporate networks. This makes it an attractive target for hackers seeking to obtain domain admin-level access. An attacker that has compromised an AD user can elevate privileges, conceal malicious activity in the network, execute malicious code, and gain access to the cloud environment to compromise assets. The XM Cyber Research team recently reported that 73% of the top attack techniques used to compromise critical assets in 2021 involved mismanaged or stolen credentials; and according to EMA research, at least 50% of organizational attacks are due to AD compromise.

"It is critical to make concentrated efforts to comprehensively secure and monitor AD, proactively look for threats and misconfigurations, and remediate to prevent dangerous actions from taking place," according to Gartner®. [1]

In this illustration, we see how an attacker leverages a vulnerability to compromise an AD user and exploit a legitimate set of configurations to escalate privileges and compromise the enterprise domain.

The XM Cyber Attack Path Management platform demonstrates how AD abuse comes into play across the entire attack path, bringing together multiple attack techniques to pinpoint the riskiest credentials and permissions across users, endpoints and services managed in AD. This enables organizations to direct resources to remediate the most impactful risks first using step-by-step guidance. The platform's comprehensive security posture analysis surfaces AD weaknesses in real time, correlating the likelihood of attacks that can compromise critical assets.

"Existing solutions provide security teams with limited visibility into which users can expose critical assets," said Boaz Gorodissky, CTO, XM Cyber. "Our unique ability to chain together AD attack techniques gives organizations the edge against attackers, enabling them to reduce their risk before the attack ever happens. We are committed to providing proactive security so CISOs can focus on maximizing resources to protect their most business-critical applications and data."

XM Cyber will debut its AD capabilities at the 2022 RSA Conference, taking place June 6-9 in San Francisco.  Interested parties can book a personal demo here or visit us at booth #4328 at the Moscone North Expo. Learn more about XM Cyber Active Directory security here.

[1] Gartner, "Emerging Technologies and Trends Impact Radar: Security", Ruggero Contu, Mark Driver, et al, 12 October 2021. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

About XM Cyber
XM Cyber is a leading hybrid cloud security company that is changing the way innovative organizations approach cyber risk. Its attack path management platform continuously uncovers hidden attack paths to businesses' critical assets across cloud and on-prem environments, enabling security teams to cut them off at key junctures and eradicate risk with a fraction of the effort. Many of the world's largest, most complex organizations choose XM Cyber to help eradicate risk. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, and Israel. 

Mark Prindle
Fusion PR
[email protected] 


These press releases may also interest you

at 10:35
Phison Electronics Corp. (TPEX: 8299), a global leader in NAND flash and storage solutions, and Cigent® Technology, Inc., the leader in embedded cybersecurity technology, today announced an innovative partnership program called Cigent Secure SSDtm...

at 10:35
Analytics Insight has named ?Top 10 Impactful CDIOs of 2022' in its June magazine issue. The issue is focusing on ambitious leaders who are combining technology strategies and business perspectives to drive organizational innovation. The magazine...

at 10:34
Sitetracker, the leading deployment operations management software for critical infrastructure providers, today announced that Norwegian-based Wattif EV has selected Sitetracker to help manage the deployment of its innovative EV charging...

at 10:30
As per Zion Market Research study, The global automated optical inspection market was valued at about USD 571.6 million in 2021 and is expected to expand to around USD 2,960.4 million by 2028, with a CAGR of around 19.5 percent during the forecast...

at 10:30
Zenarate (https://www.zenarate.com/), the industry's leading AI Conversation Simulation solution, had its AI Coach contact center training platform recognized as a runner-up in the Automation Solution of the Year category at the CCW Excellence Awards...

at 10:25
A new market study published by Global Industry Analysts Inc., (GIA) the premier market research company, today released its report titled "Autonomous Last Mile Delivery - Global Market Trajectory & Analytics". The report presents fresh perspectives...

News published on 24 may 2022 at 13:29 and distributed by: