Resources
Blog
Resource Library
March 11, 2025
The Principles for Fair & Accurate Security Ratings: A Focus on Confidentiality
Our Security ratings align with the Principles for Fair & Accurate Security Ratings, published by the US Chamber of Commerce. As part of this effort we strive to educate the cybersecurity community on how our products align with these important principles.
March 5, 2025
Scorecarder Spotlight: Luciano Bargmann
Our series “Scorecarder Spotlight” showcases our talented employees and the incredible work they do. Meet Luciano Bargmann!
Scorecarder Spotlight
March 4, 2025
3 Tangible Benefits of an A Rating
Security ratings are a standard in cybersecurity. Many organizations rely on them to manage their security programs and they create ROI for the organization. Despite the potential benefits, it can be challenging for organizations who are evaluating different security ratings options to determine the value they will get from them.
March 4, 2025
Odyssey.conf 2025: Charting the Course for Cyber Resilience
Last week, SecurityScorecard hosted our second annual Odyssey.conf in Miami, Florida. This year’s conference focused on cyber resilience, providing attendees with actionable insights and cutting-edge strategies to navigate the ever-evolving threat landscape.
Threat-Informed TPRM
March 4, 2025
From Reactive to Resilient: A New Mindset for Supply Chain Cybersecurity
Key takeaways from a recent webinar featuring SecurityScorecard CISO, Steve Cobb, on how organizations can strengthen their cyber resilience in the face of evolving threats.
Threat-Informed TPRM
February 18, 2025
Third-Party Risk Management Regulations: What You Should Know
Third-party risk management regulations may seem like red tape nuisance at first, but these regulations ultimately reduce your organization’s risk as well. Learn more.
February 13, 2025
Lazarus Group Targets Developers Through NPM Packages and Supply Chain Attacks
North Korea’s Lazarus Group is evolving its tactics again. The latest campaign, dubbed Operation Marstech Mayhem, introduces an advanced implant named “Marstech1.”
STRIKE Team
February 10, 2025
A Deep Peek at DeepSeek
DeepSeek’s rapid ascent in the AI space has made it impossible to ignore. Its sophisticated models and AI assistant have captured global attention. And, while headlines focus on DeepSeek’s capabilities, STRIKE research exposes critical security flaws, hidden data flows, and unanswered questions about who has access to the data and why.
STRIKE Team
February 4, 2025
Third-Party Risk Management Framework: How to Select the Right One
Third parties come with significant cyber security risks. Learn how to select the right risk management framework.
February 4, 2025
Beyond the Perimeter: Why CISOs Need Threat-Informed TPRM
Organizations rely heavily on external vendors and suppliers, creating complex supply chains vital for operations. However, this introduces a new dimension of risk: supply chain attacks move fast. While standard TPRM focuses on compliance, Threat-Informed TPRM is a proactive, data-first defense engine designed to stop attacks before they reach your network. The Growing Threat of
Supply Chain Cyber Risk
Threat-Informed TPRM
January 29, 2025
Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign
In December 2024, a routine software update concealed a global threat. Attackers from the Lazarus Group, based in North Korea, infiltrated trusted development tools, compromising hundreds of victims worldwide. This sophisticated campaign, code-named “Phantom Circuit,” targeted cryptocurrency and technology developers, employing advanced obfuscation techniques through proxy servers in Hasan, Russia.
STRIKE Team
January 21, 2025
5 Reasons to Integrate Continuous Monitoring into Your TPRM Program
Learn 5 reasons your organization should integrate continuous monitoring into their third-party risk management program. Read SecurityScorecard’s blog
January 17, 2025
What is the Threat Landscape?
Discover the current threat landscape and learn how to identify, assess, and mitigate evolving cyber risks to protect your organization from potential attacks.
January 16, 2025
What Is an Attack Vector? 20 Common Ways Hackers Break In and How to Prevent Them
Learn the 20 most common attack vectors hackers use to breach organizations and the best prevention strategies cybersecurity teams can adopt today.
Attack Surface Management
Tech Center
January 15, 2025
Operation 99: North Korea’s Cyber Assault on Software Developers
On January 9, the SecurityScorecard STRIKE team uncovered Operation 99, a cyberattack by the Lazarus Group, North Korea’s state-sponsored hacking unit.
STRIKE Team
January 14, 2025
How Security Ratings Help Build Strong Business Relationships
See how security ratings allow you to strengthen business relationships by giving you the information you need to enable stronger business outcomes. Learn more about security ratings for business.
January 14, 2025
Securing Patient Data: A Guide to Managed Services for Supply Chain Detection and Response in Healthcare
Patient data is among the most sensitive and valuable information in the healthcare industry. A single breach can have devastating consequences. Learn how a managed service for SCDR can help.
Threat-Informed TPRM
January 10, 2025
Securing Your Financial Ecosystem: A Guide to TPRM Managed Services
Learn more about the critical role of Managed Services for Third-Party Risk Management (TPRM) for your financial institution.
Threat-Informed TPRM
December 19, 2024
Day in the Life of a CISO: A Vendor Breach: Assessing Our Exposure
Day in the Life of a CISO: A Vendor Breach: Assessing Our Exposure
December 17, 2024
Scorecarder Spotlight: Portia Phillips
Our series “Scorecarder Spotlight” showcases our talented employees and the incredible work they do. Meet Portia Phillips!
Scorecarder Spotlight
December 17, 2024
Securing Your Healthcare Supply Chain: A Guide to Supply Chain Detection and Response
In today’s interconnected healthcare landscape, supply chain security has emerged as a critical concern. Cyber threats are becoming increasingly sophisticated, targeting vulnerable points in the supply chain to infiltrate networks and steal sensitive patient data. As a result, healthcare organizations must prioritize the security of their vendors and partners to protect their own operations and patient information.
Healthcare
Threat-Informed TPRM