Infoblox Launches External Attack Surface Management with DNS-Native Visibility

AI has collapsed the time between exposure and exploitation from weeks to minutes. Security teams need continuous, outside-in visibility into internet-facing assets and third-party dependencies before attackers weaponize them.

Reconnaissance, vulnerability identification and exploit creation used to take attackers weeks. With frontier AI, the same work now takes hours or minutes, closing the window defenders rely on. As enterprises expand across hybrid and multi-cloud environments, exposure grows faster than most security teams can inventory, prioritize or remediate. Infoblox is addressing this shift by entering the External Attack Surface Management (EASM) market and adding Supply Chain Intelligence to its Exposure Management portfolio.

What was announced

Infoblox, the platform for preemptive security and critical network services, announced its entry into the EASM market together with the launch of Supply Chain Intelligence. Both capabilities expand the Infoblox Exposure Management portfolio, helping organizations identify, prioritize and reduce exposures across their own internet-facing assets and those of critical vendors.

The EASM capability instantly discovers internet-facing assets without software installation, credentialed access or active scanning. In a recent early access program, it identified dangling CNAME records at 31 out of roughly 40 participating organizations. Nearly one-third of those records were easy or trivial to take over, enabling attackers to host phishing pages, steal credentials or send spoofed emails from a trusted corporate domain.

AI is forcing organizations to rethink how they manage cyber risk. As attackers automate reconnaissance and compress the time between exposure and exploitation, organizations need continuous visibility into their external attack surface and better context to prioritize the exposures that pose the greatest business risk.

Why this matters

For CISOs, CIOs and IT procurement leaders, external risk is no longer bounded by the organization itself. Third-party services, cloud tenants and forgotten DNS records extend the attack surface far beyond traditional perimeter tools. Preemptive visibility into these assets is becoming a core requirement for exposure management strategies.

The simple question every security leader should be able to answer is what an attacker can reach right now. As AI accelerates attacker reconnaissance, that question has become much harder to answer. With External Attack Surface Management, we are applying Infoblox deep DNS expertise to help customers discover the internet-facing exposures that matter most before they become incidents.

Technical details

• Agentless discovery: instant identification of internet-facing assets without software installation, credentials or active scanning.
• DNS-native visibility: detection of DNS hygiene issues such as dangling CNAME records that traditional tools miss.
• Exposure prioritization: ranking based on exploitability and business impact.
• Supply Chain Intelligence: continuous monitoring of vendor exposures, leaked credentials, dark web activity and active threat campaigns.
• Integrated portfolio: EASM and Supply Chain Intelligence join Digital Risk Protection Services (DRPS) within Infoblox Exposure Management.
• Workflow fit: third-party exposure data feeds into existing SOC and security operations workflows.

Softprom and Infoblox

Softprom is the official distributor of Infoblox. Our team helps enterprises deploy Infoblox Exposure Management, EASM and Supply Chain Intelligence, aligning DNS-native security with existing SOC and risk management processes.

This content was prepared as part of the Softprom DistriFlow project — an automated system for monitoring and adapting vendor news. Original source: original article.