“You Can’t Protect What You Don’t Know Exists”: Withnetworks Presents Hidden Asset Threat Management Strategies at the Busan Cybersecurity Conference

Demonstrates how to immediately identify affected assets and their owners using a PHP vulnerability exploited just five days after disclosure Introduces withVTM ahead of the expansion of public-sector security assessments to 2,160 organizations, alongside AiriX

2026 부산 사이버보안 콘퍼런스 위드네트웍스 부스 전경

Withnetworks, an AI-powered integrated ICT and cybersecurity specialist led by CEO Ahn Jong-up, announced on November 5 that it showcased withVTM, a Continuous Threat Exposure Management (CTEM)-based integrated asset and vulnerability management platform, at the 2026 Busan Cybersecurity Conference, held from November 4 to 5 at BEXCO Exhibition Center 2 in Busan.

The event was hosted by the Busan Metropolitan City Government, the Korea Housing Finance Corporation, and the regional office of the National Intelligence Service (NIS), and organized by the Korea Institute of Information Security and Cryptology. Held under the theme “A Secure Maritime Capital Busan in the Age of AI,” the conference brought together approximately 1,000 cybersecurity professionals from the public and private sectors and academia.

At the event, Withnetworks highlighted the message: “In the era of AI-driven attacks, you cannot protect assets you don’t know exist, and you cannot block vulnerabilities you overlook.” The company emphasized that externally exposed assets missing from management inventories, as well as vulnerabilities whose remediation has been deferred because of their relatively low severity ratings, can become actual attack paths when combined with other weaknesses.The time available to respond to newly disclosed vulnerabilities is also shrinking. The PHP remote code execution vulnerability known as PHP2Shell, for which a patch was released on October 21, was added to the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog just five days later, after exploitation in the wild was confirmed.

Meanwhile, the scope of the NIS cybersecurity posture assessments is set to expand to all 2,160 designated organizations by 2028. In response, Withnetworks presented withVTM as a platform for comprehensively identifying all IT assets and continuously managing vulnerabilities.

지속적 위협 노출 관리(CTEM) 기반 자산·취약점 통합 관리 플랫폼 withVTM.

withVTM is designed to support continuous security operations rather than one-time assessments. The platform identifies shadow IT and shadow APIs and expands the scope of asset management to include software components based on Software Bills of Materials (SBOMs). It then uses Withnetworks’ proprietary AI-based Vulnerability Risk Scoring (VRS) technology to evaluate asset criticality, vulnerability scores, evidence of active exploitation, and external exposure together, helping organizations determine remediation priorities.

Because the risk associated with an individual vulnerability can change when it is connected to other weaknesses in the same service, withVTM performs correlation analysis across vulnerabilities and prioritizes remediation of combinations that pose actual threats.

The platform applies the same workflow to newly disclosed vulnerabilities. When active exploitation is confirmed, the vulnerability is immediately prioritized based on the organization's asset inventory, and the affected assets and responsible personnel are identified. It also enables public institutions to manage regulatory compliance requirements through a single platform. The system calculates N2SF security classifications (C/S/O) and automatically accumulates assessment and remediation histories as supporting evidence for N2SF, ISMS-P, and cybersecurity posture assessments, generating reports from the collected records.

AI 보안 내재화 와이파이 7 AiriX.

Every AiriX AP operates as a security sensor, with built-in capabilities for continuous firmware tampering detection and wired and wireless packet analysis.

Its security solution, HawkAI, uses AI to detect wireless threats. Because it runs on a local large language model (LLM), analysis and blocking are performed within the organization's internal network, allowing it to operate even in isolated network environments.

According to the company, most visitors to its booth were IT and security personnel from local governments and public institutions in the Busan and Gyeongnam regions.

Following the first day's session on strategies for implementing the National Network Security Framework (N2SF), visitors raised practical questions about how to calculate C/S/O classifications for individual assets and whether servers in isolated networks could also be assessed. The company also received numerous inquiries from institutions preparing to undergo cybersecurity posture assessments for the first time next year, particularly about how assessment and remediation records could be used as supporting evidence.

Withnetworks said it plans to share the consultation findings with its Busan branch and follow up with institution-specific demonstrations and technical support.

“Every day, security professionals face the same question: What should we address first?” said Ahn Jong-up, CEO of Withnetworks. “withVTM answers that question by discovering assets that organizations may not even know they have and prioritizing threats created by combinations of interconnected weaknesses.”

He added, “As the number of organizations subject to security assessments increases, it is important to ensure that continuous inspections and evidence management do not become additional administrative burdens for security personnel. Through our Busan branch, we will support public institutions across Busan and Gyeongnam in establishing continuous security management frameworks.”

---

원문 보기

전자신문