Validating Enterprise Security Exposure Against Known and Emerging Threats