BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2025//speaker//M7RW3L
BEGIN:VTIMEZONE
TZID:Europe/Paris
BEGIN:DAYLIGHT
DTSTART:20240619T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T030000
RDATE:20251026T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20250330T030000
RDATE:20260329T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Beyond the Buzzwords: Threat Exposure and Attack Surface Managemen
 t in 2025 - Peder Grundvold
DTSTART;TZID=Europe/Paris:20250619T133000
DTEND;TZID=Europe/Paris:20250619T141500
DTSTAMP:20260907T130804Z
UID:pretalx-bsidesluxembourg-2025-VYZDUA@pretalx.com
DESCRIPTION:The cyber threat landscape is evolving faster than security te
 ams can keep up. Organisations are no longer just defending their own netw
 orks – they must also manage risks from cloud services\, third-party pro
 viders\, vulnerable identities and dark web exposures. The traditional sec
 urity model\, based on scheduled scans and compliance-driven patching\, is
  failing to keep pace\, leaving businesses vulnerable to the growing numbe
 r of emerging attack vectors.\n\nAt the same time\, remediation and manage
 ment solutions struggle with the sheer scale of modern attack surfaces. Se
 curity teams are overwhelmed with alerts\, yet critical exposures still go
  unnoticed. Organizations need to work smarter when managing their threat 
 exposure\, and in this way prioritise the risks that actually matter befor
 e they become incidents.\n\nAs a response during the last decade\, we have
  seen several new frameworks\, methodologies and solutions\, from Identity
  Exposure to Attack Surface Management. Most recently\, Gartner introduced
  Continuous Threat Exposure Management (CTEM)\, which was also named numbe
 r two on their top 10 strategic technology trends for 2024. But what exact
 ly do these buzzwords mean? What are the actual changes going from one met
 hodology to the next? And how does this latest iteration\, CTEM\, fit into
  the bigger picture – and potentially offer the right approach for your 
 organisation?\n\nDuring this presentation\, I will navigate the complex an
 d evolving solution landscape of exposure management\, describe where and 
 why CTEM fits in\, and offer recommendations on where organisations can st
 art in modernising their approach. The aim is to go beyond general descrip
 tions\, and rather dive into concrete examples for a modern approach to ex
 posure and attack surface management in 2025.
LOCATION:Classroom 4 - CLUSIL track
URL:https://pretalx.com/bsidesluxembourg-2025/talk/VYZDUA/
END:VEVENT
END:VCALENDAR
