Through the Attacker's Eyes: Evidence Over Assumptions

Through the Attacker's Eyes examines cybersecurity from the perspective that matters most: the attacker's. Explore expert insights on validating real-world risk, prioritizing what matters, verifying remediation, and building lasting cyber resilience.

Why AI raises the stakes for exposure validation

At Fal.Con 2026, security leaders faced a growing challenge: AI is accelerating vulnerability discovery. Identifying which exposures attackers can actually exploit is key.

By Joan Goodchild

Sep 11, 2026 2 mins

Artificial Intelligence

Why exposure management is replacing vulnerability management

Visibility isn’t the problem.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 6 mins

Risk Management Security Security Practices

How a software provider closed unknown paths to cloud compromise

Just one penetration test demonstrated how fast and far an attacker could compromise systems.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 5 mins

Security Security Practices Vulnerabilities

How a global investment firm reduced security surprises

Organization also surprised by ease of deployment and effectiveness of continuous validation.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 4 mins

Security Security Practices Vulnerabilities

You’re only as secure as your last evaluation

You’re only as secure as your last evaluation

By Tim Jones, Horizon3.ai

Aug 6, 2026 7 mins

Security Security Practices

Cybersecurity needs a new operating model

Why AI is changing how organizations achieve cyber resilience.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 5 mins

Cyberattacks Security

The exploit window is shrinking. Most security workflows are not

Discover how to better validate exposure, reduce uncertainty, and close the exploit window faster.

By Jing Cao, Horizon3.ai

Aug 6, 2026 6 mins

Security Security Practices

CTEM isn’t failing. It’s not being operationalized

For measurable results, organizations need a continuous threat exposure management program that addresses specific questions.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 5 mins

Security Security Practices

Autonomy is earned, not claimed

What 300,000 production pentests have revealed about trust, exploitability, and autonomous security.

By Stephen Gates

Aug 6, 2026 5 mins

Cyberattacks Security Security Practices

Verification closes the loop

Finding exposure is only half the job.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 6 mins

Security Security Practices

Security validation should begin where attackers begin

Why enterprise attack paths demand a new approach to security validation

By Stephen Gates, Horizon3.ai

Aug 5, 2026 5 mins

Security Security Practices Vulnerabilities

Why security validation must follow the attack path

As attackers chain together weaknesses across applications, identities, and cloud environments, organizations need continuous validation that reflects how real attacks unfold.

By Joan Goodchild

Aug 5, 2026 4 mins

Artificial Intelligence

Show me more

Google makes Gemini 4 AI model available to a trusted few

By Nidhi Singal

Oct 1, 20265 mins

Artificial IntelligenceSecurity

Cisco SD-WAN Manager hit by zero-day admin access attack

By Shweta Sharma

Oct 1, 20264 mins

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

Why AI agents are like the dog that pushed kids into the Seine

Oct 1, 20266 mins

Access ControlData and Information SecurityIT Governance

Why Email Still Works for Attackers

By Joan Goodchild

Sep 30, 20266 mins

The Evolving CISO: AI, Leadership and the Future of Cybersecurity

By Joan Goodchild

Sep 24, 20266 mins

Why Security Debt May Be a Bigger Risk Than Security Spend

By Joan Goodchild

Sep 10, 202616 mins

Why Email Still Works for Attackers

By Joan Goodchild

Sep 30, 20266 mins

The Evolving CISO: AI, Leadership and the Future of Cybersecurity

By Joan Goodchild

Sep 24, 20266 mins

Why Security Debt May Be a Bigger Risk Than Security Spend

By Joan Goodchild

Sep 10, 202616 mins