Blog

The Recon Log

Fresh insights and real-world lessons on attack surface, third-party risk, and the things that matter.

Thank you! You are now susbribed to The Recon Log

Oops! Something went wrong while submitting the form.

Beyond CVSS: Introducing Digital Proximity™ for Smarter Risk Models

This security metric adds context to vulnerability management by showing how close each exposure sits to critical systems, data, and suppliers.

Stephane Konarkowski

Stephane Konarkowski

Chief Product Officer

read the article

4 Cyber Horror Stories of Exposure (And the Fixes that Stopped Them)

In security, the real horrors include rogue plugins, malicious code, and hidden API calls.

Sabrina Pagnotta

October 31, 2025

Cookie Security: The Overlooked Threat to Cyber Hygiene

Cookies are small files websites store in your browser to remember identity, activity, and access—powerful markers of who you are online.

Stephane Konarkowski

October 29, 2025

Beyond CVSS: Introducing Digital Proximity™ for Smarter Risk Models

This security metric adds context to vulnerability management by showing how close each exposure sits to critical systems, data, and suppliers.

Stephane Konarkowski

October 22, 2025

Shadow IT on Campus: How Hidden Risk is Undermining Education Cybersecurity

Education’s reliance on SaaS and vendors expands attack surfaces—finding hidden assets and supply chain risks is key to reducing breach risk.

October 15, 2025

Digital Twins, Real Threats: Securing the Manufacturing Supply Chain

Manufacturers are leaking risk through forgotten IIoT devices, orphaned APIs, and vendor blind spots. Here’s how to close those gaps.

October 8, 2025

Why CISOs Struggle With Shadow Assets (and What to Do About It)

Shadow IT and forgotten assets are keeping CISOs awake at night. Here’s how to uncover and prioritize risks with continuous attack surface discovery.

Sabrina Pagnotta

October 1, 2025

A Security Leader's Guide to Digital Proximity & Prioritization

Learn how to use continuous discovery and Digital Proximity™ (patent pending) to prioritize risk.

Sabrina Pagnotta

September 24, 2025

10 Questions and Metrics for CISOs to Track Exposure & Supply-Chain Risk

A practical question set to pressure-test external attack surface and vendor risk programs, with outcomes, metrics, and board-ready evidence

Sabrina Pagnotta

September 17, 2025

Enterprises Face Over 800,000 High-Severity Cyber Hygiene Failures

ThingsRecon, a leader in attack surface discovery, releases its first industry study on enterprise digital hygiene in attack surface and supply chains

September 9, 2025

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.