TAG Cyber 2024 2nd Quarterly Report
In the Q2 Quarterly Report, TAG conducted a focused review to assess the current state of cybersecurity. They tasked their analysts with investigating the most critical aspects of the field and compiling their findings.
The report includes an insightful interview with Nir Loya Dahan, Cymulate’s VP of Product. In the interview, he critiques traditional find-fix vulnerability management approaches and underscores the advantages of exposure management.
Featured Resources
View More Resources
Kerberos Authentication Relay Via CNAME Abuse
Cymulate Research Labs uncovered a dangerous flaw in how Windows environments handle Kerberos service ticket requests one that significantly expands the practical attack surface
CVE-2026-20965: Cymulate Research Labs Discovers Token Validation Flaw that Leads to Tenant-Wide RCE in Azure Windows Admin Center
A subtle Azure SSO token validation flaw allowed attackers to escalate privileges and move laterally across WAC-managed systems.
Evolving Vulnerability Management to Continuous Threat Exposure Management
Shift from reactive vulnerability management to continuous, threat-validated exposure management for real risk resilience.