Share Full episode and show notes Attack surface management Attack Surface Management Explained: Why You Don’t Know What You Own – WC #1 Your attack surface is bigger, and more unknown than you think. Learn how modern environments (cloud, SaaS, identity) are reshaping risk, and how to prioritize what actually matters. Thank you to our sponsor for this webcast, Axonius! If you don’t know what assets you have, you don’t know your risk. Learn how to fix it at https://scworld.com/webcasts. May 19, 2026 Full Segment Notes Your attack surface is bigger, and more unknown than you think. Learn how modern environments (cloud, SaaS, identity) are reshaping risk, and how to prioritize what actually matters. Thank you to our sponsor for this webcast, Axonius! If you don’t know what assets you have, you don’t know your risk. Learn how to fix it at https://scworld.com/webcasts. Key Moments 0:00 - Introduction: The Attack Surface Problem 03:00 - Why Attack Surface Exploded Post-Pandemic 06:00 - Everything is an Attack Surface (Not Just Devices) 09:00 - The Visibility Problem (You Can’t Secure What You Can’t See) 12:00 - Unknown Assets: The Biggest Risk 15:00 - How to Justify Budget for “Unknown” Risk 18:00 - Asset Inventory is the Foundation 21:00 - Prioritization: What Actually Matters 24:00 - Crown Jewels vs Everything Else 27:00 - Winning Buy-In Across Teams 30:00 - Rogue Systems & Shadow IT 33:00 - Detecting Unauthorized Assets 36:00 - Identity as Attack Surface (Critical Insight) 39:00 - Data-Centric Security Approach 42:00 - Vulnerabilities vs Exposures (Key Shift) 45:00 - How to Reduce 100K Vulns to What Matters 48:00 - Third-Party & SaaS Risk Challenges 51:00 - Where Attack Surface Management is Going 54:00 - First Steps to Get Started 57:00 - Final Takeaways Host Dustin Sachs Show More Stay in the Know, No Smoke and Mirrors – Join Our Newsletter Get expert insights and technical breakdowns straight to your inbox. Join Now Related Segments Application security The Human Aspect of Red Teams – Brian Fox, Tom Tovar, T. Gwyddon ‘Data’ Owen – ASW #379 AI/ML Scanning The Internet with Linux Tools – PSW #919 Application security Why Proactive Security Is Far Better Than Patching – Erik Nost – ASW #375 Related Content MSSP Blumira’s Kindling Platform Helps MSSPs Streamline Alert Analysis MSSP Crogl Offers Free AI SOC Tool as MSSPs Face Rising Alert Pressure MSSP AI-Powered Cyberattacks Put MSSPs and SOC Teams Under Pressure You can skip this ad in 5 seconds