Cortex Xpanse

Cortex Xpanse

Welcome to the Cortex Xpanse resource page. Cortex Xpanse allows you to 'know your Internet' by providing you with an outside-in view of your Internet attack surface.

Welcome to the Cortex Xpanse resource page. Cortex Xpanse builds a system of record that is the authoritative source for an organization’s global Internet assets; it knows your attack surface so you can own it before someone else. On this page you can engage in Cortex Xpanse discussions and review helpful resources dedicated to Cortex Xpanse.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
DanielTCLEE 02-19-2025	Delete a Rule-Based Tag on Graphical User Interface ("GUI") I created a Rules-Based Tag called "Owner" that I do not need. I have not added it to any asset yet. How can I delete this tag on GUI? Cortex Xpanse... — Read more posted in Cortex Xpanse Discussions	330	2
JayGolf 01-15-2025	Welcome to the Cortex Xpanse Discussions! To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be ... — Read more posted in Cortex Xpanse Discussions	307	0
P.Pintens 11-18-2024	Certificate Expiration Related to Xpanse Access? I'm trying to see if anyone else is having issues accessing Xpanse? I saw that that updates were needed for User-ID certs by today (Aug-18), and from ... — Read more posted in Cortex Xpanse Discussions	551	0
mbuckner 04-05-2024	Tag new certificates assets with an asset tag in xpanse How can I leverage the API to add an asset tag to new assets as they come in that are of the asset_type certificate? I want to filter my alerts to sho... — Read more posted in Cortex Xpanse Discussions	1774	1
nijats 03-18-2024	Xpanse Business Units Hi, Currently we have 2 Business Units "Azercell" and "Baktelekom" on "Inventory > Owned IPv4 Ranges" tab. We've created 2 different tags on Tags f... — Read more posted in Cortex Xpanse Discussions	1742	1

Blogs

Automate Insecure OpenSSH Vulnerability Patching in Ubuntu AWS EC2 with Cortex Xpanse

07-29-2024 — A new vulnerability in Open Secure Shell (OpenSSH), identified as Common Vulnerabilities and Exposures (CVE) CVE-2023-25136, poses a significant threat to Amazon Web Services Elastic Cloud Compute (AWS EC2) instances. If left unpatched, this vulne... — Read more

Labels: Active Response Attack Surface Management Automation Cortex Xpanse Product Features Use-Cases
1351 by rtsedaka in Community Blogs

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

07-15-2024 — On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tracked as CVE-2024-6387, can result in unauthenticated remote... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR CVE-2024-6387 OpenSSH OpenSSH . RegreSSHion . Vulnerability RegreSSHion Remote Code Execution SSH threat brief
16105 by rtsedaka in Community Blogs

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Release)

07-03-2024 — ith the ever evolving threat landscape, security operations teams require a new level of efficiency to protect their organizations. The latest release across Cortex products aims to solve a diverse set of challenges in security operations, all whi... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR XDR Xpanse XSIAM XSOAR
5250 by GonenFink in Community Blogs

Enhancing Critical Risk Detection with Cortex Xpanse Attack Surface Rules

07-03-2024 — Today, we are announcing an expansion to our Attack Surface Rules which help customers automatically find their critical exposures and risks. In our latest announcement, we delivered our 800th surface rule for our customers using Expander and the ... — Read more

Labels: Cortex Xpanse Xpanse
1751 by rtsedaka in Community Blogs

Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400

04-24-2024 — This threat brief is frequently updated as new threat intelligence is available for us to share. The full update log is at the end of this post and offers the fullest account of all changes made. — Read more

Labels: Cortex Cortex XDR Cortex Xpanse Cortex XSIAM threat brief Threat Briefs and Assessments Unit 42 unit42
4061 by emgarcia in Community Blogs