Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point (thehackernews.com)

submitted 6 days ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

0 comments fedilink hide all child comments

Introduction

Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise.

But no matter how much you validate against these

no comments (yet)

sorted by: hot top new old

there doesn't seem to be anything here

this post was submitted on 15 Sep 2026

1 points (100.0% liked)

Pulse of Truth

2521 readers

1 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

founded 2 years ago

MODERATORS

krogoth@infosec.pub