---
title: "What’s New in Infoblox Exposure Management"
canonical: "https://docs.infoblox.com/space/IEM/2652602612/What%E2%80%99s+New+in+Infoblox+Exposure+Management"
format: markdown
---
This topic includes new features and enhancements for Infoblox Exposure Management. You can view information about other enhancements and maintenance for Infoblox SaaS products and services in the *[Infoblox SaaS Release Notes](https://docs.infoblox.com/space/BloxOneCloud/35461931/Infoblox+SaaS+Release+Notes)*.
## **Infoblox Exposure Management – November 4, 2026**
##### Exposure Management is now fully integrated into the Infoblox Portal.
Exposure Management is now part of the unified Infoblox Portal experience. With the new navigation, it no longer opens in a new tab: the “Axur” menu is now the Exposure Management product, and you reach it from the product selector alongside your other products, without leaving the portal. If you have Security Tokens, you can start exploring it today. If not, contact your Account Owner to start a trial.
##### Data Entry App Updated to Resolve Table Editing Issues.
The Data Entry app has been updated to resolve connection errors that previously prevented users from editing tables. The updated application removes the underlying dependency responsible for these errors, improving reliability and restoring table editing functionality.
The updated app is available at [https://eu.data-entry.axrml.com/](https://eu.data-entry.axrml.com/). Users must be connected to the Infoblox VPN to access the application. The previous URL is being replaced, so users should update their bookmarks to the new address.
## **Infoblox Exposure Management – November 3, 2026**
##### Enhanced Takedown Notifications for Executive and VIP Assets.
Infoblox Exposure Management has enhanced takedown notifications for Executive and VIP assets by using Asset Management as the single source of truth for asset information. Notifications now retrieve VIP information directly from Asset Management, including LinkedIn profiles, social media accounts, and website information. When information is unavailable for a VIP, notifications automatically use available information from the associated brand, including country, registration details, social media profiles, and website information.
This enhancement improves the accuracy and consistency of takedown notifications while preserving information manually entered by operators. Existing values are replaced only when updated information is available in Asset Management. Additionally, notifications for Meta platforms now provide clear error messages identifying missing required information, helping operators resolve issues more efficiently. For information, see *[Executives and VIPs](https://docs.infoblox.com/space/IEM/2783969326/Executives+and+VIPs)*.
## **Infoblox Exposure Management – October 30, 2026**
##### **Infoblox Introduces Suspended Customer Indicators in Exposure Management.**
Infoblox has enhanced the grouped customer selector in Exposure Management with a visual indicator that identifies suspended customer accounts. This improvement allows administrators and users managing multiple tenants to quickly distinguish suspended customers from active customers, reducing confusion and simplifying account navigation.
The suspended customer indicator is available in Automations, Monitoring Settings, Stats, Tenants Management, and Plan & Usage. Support for API & Integrations is planned for a future release. This enhancement improves account visibility and helps users manage customer accounts more efficiently.
## **Infoblox Exposure Management – October 26, 2026**
##### Infoblox Unifies Similar Domain Name and Lookalike Domain Detection in Exposure Management
Infoblox has enhanced lookalike domain detection in Exposure Management by integrating Similar Domain Name (SDN) detection with Lookalike Domains detection from Infoblox Threat Defense. This integration combines both detection technologies into a unified pipeline in Signal Lake, leveraging Exposure Management's detection capabilities and Infoblox threat intelligence from TIDE. Domains associated with monitored brands in Exposure Management are now analyzed using Infoblox's Data Science algorithms, expanding detection coverage and improving the identification of potentially malicious lookalike domains.
As part of this enhancement, Similar Domain Name and Phishing tickets now include additional threat intelligence, such as known DNS threat actor associations, hosting provider information, Autonomous System Numbers (ASNs), DNS records (SOA, TXT/SPF, PTR, and TTL), and SSL certificate details. Analysts can also navigate directly from ticket fields to Threat Hunting using hostnames, registrant email addresses, IP addresses, DNS A records, and SSL SHA-256 fingerprints to investigate related threats. An improved ticket layout prioritizes relevant security information, helping security teams streamline threat investigation, reduce detection gaps, and improve incident response. For additional information, see *[Similar Domain Names](https://docs.infoblox.com/space/IEM/2714730497/Similar+Domain+Names)*.
## **Infoblox Exposure Management – October 22, 2026**
##### Infoblox Introduces Direct Registry-Level Takedown Notifications for XYZ Domains.
Infoblox has enhanced the takedown capabilities in Exposure Management by introducing a direct registry-level notification channel with XYZ, a domain registry that manages 34 top-level domains (TLDs). This integration enables security teams to report malicious domains associated with XYZ-managed TLDs directly to the registry, bypassing traditional hosting provider notification processes and accelerating the handling of domain abuse cases.
This enhancement improves the response to high-risk threats, particularly credential phishing campaigns involving fraudulent Apple ID and iCloud account recovery websites. Previously, takedown requests submitted through hosting providers could take more than four days to resolve. The new registry-level notification channel is expected to significantly reduce takedown times, potentially to approximately one hour, helping organizations respond more quickly to phishing threats, protect end users, and minimize exposure to malicious domains.
## **Infoblox Exposure Management – October 20, 2026**
##### Infoblox Introduces IQ for Exposure Management in Early Access.
Infoblox introduces IQ for Exposure Management, an AI-powered capability that uses machine learning and large language models (LLMs) to analyze credential exposure detections and recommend automation rules. The system evaluates credential exposures across a customer's environment and generates actionable insights that identify opportunities to create or modify automation rules. Each insight is prioritized by severity and confidence, helping security teams focus on significant exposures, reduce manual investigation, and improve remediation efficiency.
IQ for Exposure Management is currently available through a limited Early Access Program (EAP). This initial release allows participating customers to evaluate AI-driven insights and automation recommendations while providing feedback to support future enhancements and broader availability.
## **Infoblox Exposure Management – October 8, 2026**
##### **Infoblox Introduces Infostealer Exposure Detection in Exposure Management.**
Infoblox introduces Infostealer Exposure, a new detection category in Exposure Management's Data Leakage capabilities that provides visibility into compromised computers and potentially exposed sensitive information. Customers can monitor domains, IP addresses and ranges, and third-party login pages to identify infostealer-related exposures associated with their assets. Each detection represents an affected computer and consolidates exposed information, including credentials, credit card data, autofill information, cookies, running processes, installed software, and files, providing security teams with a comprehensive view of potential risks.
With this enhancement, analysts can review exposed records, preview and download files, access original exposure packages, and manage detections using statuses, tags, and notes. Detections can also be exported and accessed through the Exposure API, Integration Feeds with Push and Pull delivery, and Slack integration. These capabilities help security teams identify compromised computers, assess the extent of sensitive data exposure, and streamline investigations and remediation using existing Data Leakage workflows. For information, see *[Infostealer Credentials](https://docs.infoblox.com/space/IEM/3041755167/Infostealer+Credentials)*.
## **Infoblox Exposure Management – September 25, 2026**
##### **Infoblox Introduces EU Regional Support for External Attack Surface Management.**
Infoblox Exposure Management now supports External Attack Surface Management (EASM) fully within the EU region (eu-com-1). European customers can discover assets and identify exposures with data processed and stored on EU infrastructure, without routing data through the US environment. This regional deployment supports GDPR and other EU data residency and compliance requirements. For information, see *[External Attack Surface Management (EASM)](https://docs.infoblox.com/space/IEM/2635040474/External+Attack+Surface+Management+(EASM))*.
## **Infoblox Exposure Management – September 2, 2026**
##### **Credit Card Exposure Email Alerts**
Credit Card Exposure now sends real-time email alerts for detections generated directly in the platform. These alerts notify customers and partners as soon as newly exposed cards are identified, helping security teams respond more quickly.
Email notifications are organized by customer to simplify incident review and response. Each notification includes the key details needed to understand the exposure and provides a direct link to the *Cards* section with the relevant filters already applied. Users can manage their notification preferences in *My preferences* and unsubscribe from alerts whenever needed. For information, see *[Credit Card Exposure](https://docs.infoblox.com/space/IEM/2713583911/Credit+Card+Exposure)*.
## **Infoblox Exposure Management – August 19, 2026**
##### **Exposure Management now includes automated detection triage.**
Automations let you create rules that act on detections without requiring an analyst to review and triage each one manually. When a detection matches the conditions you define, an automation can change its status, apply a tag, or add a note. You control when each automation runs by reviewing and activating it after configuration. Automations allow users to automate tickets in workspaces, providing tools for creating, editing, prioritizing, pausing, and deleting automations. They also use permissions to control who can manage automation rules. For information about how to get started and where to find additional resources, see *[Infoblox Exposure Management Automations](https://docs.infoblox.com/space/IEM/2712731664/EASM+Automations)*.
## **Infoblox Exposure Management – August 13, 2026**
This release expands Infoblox Exposure Management with new threat-hunting analytics, supply chain monitoring, risk-based external attack surface management, and improved visibility into brand and financial exposure.
- **Mobile Apps in Threat Hunting:** Investigate potentially malicious mobile applications using AI-powered analysis of logos, images, colors, impersonated brands, and related metadata.
- **Threat Hunting Analytics:** Visualize search results through charts and key performance indicators, compare source distribution and trends, and share views linked to specific searches.
- **Supply Chain Intelligence:** Continuously monitor vendor-related threats, exposed credentials, attack surface issues, and dark web mentions from a unified workspace.
- **Risk-based EASM:** Discover internet-facing assets, prioritize exposures according to business impact and exploit feasibility, and follow built-in remediation guidance.
- **Brand Protection dashboard:** Quickly review stalled tickets, takedown performance, scan volume, and the assets generating the most detections.
- **Expanded similar-domain filtering:** Create more comprehensive similar-domain rules using the new wild-fuzzy match type.
- **Credit Card Exposure in Splunk:** Ingest credit card exposure events through the existing Axur Data Connector and select a deduplication strategy for each registered Bank Identification Number asset.
For more information see, *[Axur Product Update](https://discover.axur.com/partner-product-updates-en-august-2026?ecid=&utm_campaign=Newsletter%20-%20Novidades%20de%20produtos&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9_CaU4gFXX8jM2YH0hhAPwmsXY0Sm9B8H2GKVN3pWNr2waUOBotHp0KWQXxOtVb9x12WCl)*[s](https://discover.axur.com/partner-product-updates-en-august-2026?ecid=&utm_campaign=Newsletter%20-%20Novidades%20de%20produtos&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9_CaU4gFXX8jM2YH0hhAPwmsXY0Sm9B8H2GKVN3pWNr2waUOBotHp0KWQXxOtVb9x12WCl).
## **Infoblox Exposure Management – July 28, 2026 **
##### **Infoblox introduces External Attack Surface Management with Supply Chain Intelligence**
Infoblox External Attack Surface Management (EASM) and Supply Chain Intelligence help security teams identify and address externally accessible risks before attackers exploit them.
As attackers use AI and automation to accelerate reconnaissance, organizations need continuous visibility into their external infrastructure and third-party vendors. These capabilities prioritize exposures by exploit feasibility and business impact, helping teams focus on the most significant risks.
**External Attack Surface Management**
EASM continuously discovers internet-facing assets from an attacker’s perspective. It requires no agents, credentials, or existing asset inventory. Starting with a domain name, EASM discovers related assets and provides a prioritized exposure view within hours.
EASM identifies:
- **Vulnerabilities:** Known vulnerabilities prioritized by exploit feasibility, business impact, and active exploitation.
- **DNS hygiene issues:** Abandoned records, weak email authentication, broken DNS delegations, and other misconfigurations.
- **Risky ports and services:** Externally accessible infrastructure that may increase the attack surface.
- **Certificate issues:** Expiring, misconfigured, or weak TLS certificates.
Related findings are grouped to reduce duplicate alerts. Each finding includes remediation guidance, ownership information, and verification steps.
For more information, see *[External Attack Surface Management (EASM)](https://docs.infoblox.com/space/IEM/2635007241/Infoblox+Exposure+Management+Home)**.*
**Supply Chain Intelligence**
Supply Chain Intelligence extends exposure monitoring to critical vendors. It identifies external vulnerabilities, leaked credentials, and active threats that could affect your organization through trusted third-party relationships.
The findings help analysts assess vendor risk, prioritize investigations, and coordinate remediation with affected vendors.
For more information, see *[Supply Chain Intelligence](https://docs.infoblox.com/space/IEM/2634911212/Supply+Chain+Intelligence)**.*