Listen to this Post
As cyber threats continue to evolve, businesses must stay ahead with proactive security solutions. Advanced Cyber Defence Systems (ACDS) has announced significant enhancements to its External Attack Surface Management (EASM) tool, Observatory. These updates focus on addressing critical security risks, such as leaked AWS access keys and software supply chain vulnerabilities, including threats from compromised products like Polyfill.
With enterprises increasingly relying on cloud services, their attack surface constantly shifts, making real-time security monitoring essential. ACDS’s latest upgrades aim to provide deeper insights and more effective protection against emerging cyber threats. This announcement comes at a time when half of security professionals believe that unknown devices could be lurking within their networks, highlighting the importance of comprehensive visibility and attack surface management.
Observatory’s New Features
Observatory is a cutting-edge EASM solution designed to scan billions of internet-facing IPs and ports, offering a holistic view of an organization’s vulnerabilities. Unlike traditional vulnerability scanners, Observatory provides a more dynamic and continuous assessment of an organization’s security posture.
Key Upgrades to Observatory:
- Identity and Access Key Monitoring – The tool now identifies and reports exposed identity and access keys, enabling security teams to quickly respond to potential threats.
-
AWS Access Keys and Secret Key Detection – Leaked AWS credentials can lead to cloud resource hijacking, data breaches, and financial losses. Observatory now scans for exposed keys to prevent unauthorized access.
-
Polyfill.io Software Supply Chain Protection – Polyfill was compromised by cybercriminals in 2024, injecting malicious code into users’ browsers. Observatory detects the presence of Polyfill and other vulnerable supply chain components to safeguard organizations from such risks.
Beyond these new capabilities, Observatory continues to provide continuous scanning, identifying known vulnerabilities (CVEs) with essential security scoring metrics, including EPSS, CVSS, and CISA KEV flags.
Elliott Wilkes, CTO of ACDS, emphasized the importance of visibility in cybersecurity, stating that security leaders must precisely map out their attack surface, including all assets, subdomains, IPs, and critical systems. Continuous monitoring is key as enterprise workloads shift dynamically in cloud environments. ACDS will showcase these enhancements at the Cloud and Cyber Expo in London on March 12–13, 2025, with live demonstrations available.
What Undercode Say:
ACDS’s upgrades to Observatory reflect the growing need for advanced security measures in an increasingly cloud-dominated IT environment. The modern attack surface is no longer static; it changes daily with new cloud workloads, shifting IP addresses, and evolving threats. The key takeaways from these updates highlight broader cybersecurity trends and challenges that businesses must address.
1. The Expanding Attack Surface Problem
Cloud adoption has skyrocketed, with providers like AWS growing 25x over the past decade. While this brings flexibility, it also introduces security complexities. Organizations must now monitor a broader attack surface, where even a single misconfigured asset or exposed credential can be a gateway for attackers. The Observatory upgrade addresses this by providing continuous visibility into potential weaknesses.
2. The Growing Risk of Leaked Cloud Credentials
Cloud credentials are a goldmine for cybercriminals. Attackers use leaked AWS keys to hijack cloud resources, deploy cryptominers, or access sensitive data. A tool that proactively detects exposed keys can significantly reduce the risk of account takeovers and unauthorized cloud usage. Many organizations remain unaware of compromised credentials until it’s too late—Observatory aims to change that.
- Software Supply Chain Security Is More Critical Than Ever
The Polyfill compromise is a stark reminder of how widespread supply chain attacks can be. More than 100,000 organizations unknowingly used compromised Polyfill services, which injected malicious code into browsers. Many outdated websites still carry this risk, making supply chain security a priority. By detecting such threats, Observatory helps organizations remove compromised components before they become exploitation vectors.
- The Shift from Traditional Scanning to Holistic Attack Surface Management
Most organizations still rely on periodic vulnerability scanning, which provides a snapshot rather than a real-time view. Observatory moves beyond this outdated model by continuously mapping vulnerabilities and assessing risks dynamically. It prioritizes threats based on unique intelligence, ensuring security teams focus on the most pressing issues.
- Continuous Security Monitoring as a Necessity, Not an Option
With modern infrastructures constantly evolving, security must be an ongoing process rather than a one-time assessment. The fact that 50% of security professionals believe unknown devices exist within their networks underscores how blind spots can exist in even the most well-protected environments. Continuous monitoring tools like Observatory are becoming a critical requirement, not just an added layer of protection.
6. Real-World Application of Observatory’s Enhancements
Organizations that fail to detect and remediate security issues in real time are at higher risk of breaches. The Observatory platform’s ability to scan the internet, validate vulnerabilities, and provide actionable insights ensures enterprises stay ahead of cyber threats. As the cybersecurity landscape grows more sophisticated, businesses must adopt similarly advanced solutions.
7. ACDS’s Strategic Positioning in the Cybersecurity Market
By focusing on attack surface management and real-time vulnerability detection, ACDS is aligning itself with a growing segment of the cybersecurity industry. Many enterprises are shifting from traditional security tools to more proactive, AI-driven solutions that provide continuous insights. With cybersecurity threats constantly evolving, companies investing in real-time threat intelligence will have the upper hand.
Final Thoughts
The latest Observatory updates reinforce the necessity of a proactive cybersecurity approach. Organizations can no longer afford to react only when a breach occurs—they must detect and mitigate threats before they become major incidents. With cyberattacks becoming more sophisticated, leveraging AI-driven tools like Observatory is crucial to maintaining a strong security posture in 2025 and beyond.
ACDS’s move to enhance Observatory’s capabilities reflects the broader industry trend of shifting from reactive to proactive cybersecurity. With the rising complexity of digital infrastructures, continuous monitoring, real-time intelligence, and automated detection are becoming indispensable in modern cybersecurity strategies.
References:
Reported By: https://www.itsecurityguru.org/2025/02/25/acds-unveils-new-updates-to-easm-platform-enhancing-security-for-enterprises/
Extra Source Hub:
https://www.reddit.com/r/AskReddit
Wikipedia: https://www.wikipedia.org
Undercode AI
Image Source:
OpenAI: https://craiyon.com
Undercode AI DI v2
