Blog

March 24, 2026

SecurityScorecard and Dataminr Partner to Deliver Preemptive Cyber Defense for the Enterprise

Combining third party risk and external attack surface management with client-tailored threat intelligence to help organizations stop threats before they strike.

March 23, 2026

Supply Chains Are the New Front Line for Cyber Resilience

Supply chains are the top cyber resilience challenge in 2026. See how continuous monitoring and threat-informed vendor risk management protect your operations.

March 16, 2026

What Is Application Security and Best Practices for it?

Learn what application security is and why your vendors’ AppSec gaps become your risk. Learn how continuous monitoring protects your supply chain.

March 9, 2026

What Is a Supply Chain Attack?

Learn how a supply chain attack works, why it’s so dangerous, and what security measures can help protect your organization from hidden threats.

Supply Chain Cyber Risk

Threat-Informed TPRM

February 25, 2026

What the Mississippi Ransomware Attack Means for Healthcare and How to Protect Critical Infrastructure

A ransomware attack shut down clinics across Mississippi. Learn how healthcare and critical infrastructure can prevent supply chain-driven cyber disruptions.

February 17, 2026

What Are the Real Security Risks of Agentic AI and OpenClaw?

SecurityScorecard’s STRIKE Threat Intelligence team examines exposed OpenClaw deployments and the broader security risks of agentic AI, including remote code execution vulnerabilities, prompt injection, and the security controls organizations must implement now.

February 14, 2026

What is a CVE and Why is It Important?

What is a CVE? This guide explains how security teams use Common Vulnerabilities and Exposures to identify, track, and prioritize the threats that matter most.

February 11, 2026

How Exposed OpenClaw Deployments Turn Agentic AI Into an Attack Surface

SecurityScorecard’s STRIKE Threat Intelligence team details new research on exposed OpenClaw agentic AI deployments, explaining how attackers can abuse them for remote code execution and infrastructure misuse. STRIKE also shared steps organizations can take to reduce exposure.

February 10, 2026

Recent Data Breach Examples

Discover how real data breach examples expose third-party risks. Learn from MOVEit, healthcare breaches, and M365 attacks to protect your business.

February 9, 2026

Strengthening National Cyber Resilience: Reflections from My Fireside Chat with ONCD Director Sean Cairncross

Mike Centrella, SecurityScorecard Head of Public Policy, shares insights from his fireside chat with the National Cyber Director Sean Cairncross on strengthening U.S. cyber resilience, deterrence, AI security, and workforce strategy.

February 9, 2026

Beyond the Hype: Moltbot’s Real Risk Is Exposed Infrastructure, Not AI Superintelligence

While the world debates Moltbook’s role in the AI ecosystem, it is just the tip of the iceberg of Titanic risk. SecurityScorecard’s STRIKE team uncovered what lurks beneath: Thousands of exposed OpenClaw (Moltbot) control panels vulnerable to takeover through misconfigured access and known exploits.

STRIKE Team

February 5, 2026

Why India Is Emerging as a Third-Party Breach Hotspot

SecurityScorecard experts analyzed why 52.6% of Indian vendors experienced at least one third-party breach in the past year in a recent webinar. India has become one of the most critical engines of the global digital economy and one of the most targeted.

February 4, 2026

What is a SOC 2 Compliance Checklist?

Use this SOC 2 compliance checklist to prepare for your audit, meet requirements, and maintain continuous compliance. Expert guidance for security leaders.

February 3, 2026

What Are Moltbot and Moltbook and What Happens When Agentic AI Assistants Scale Without Security

Moltbot AI assistants and their social media platform Moltbook have sparked AGI fears in recent days, but the real risk is access. Learn what Moltbook and Moltbot are (now OpenClaw and formerly known as Clawdbot), why it’s not artificial general intelligence (AGI), and how to reduce security exposure.

February 3, 2026

What Is Network Cloud Security?

Learn what network cloud security is, why traditional approaches fall short, and best practices for protecting your cloud infrastructure from security threats.

February 3, 2026

Odyssey 2026 Recap: Building Continuous Supply Chain Resilience in an Era of Persistent Threats

SecurityScorecard’s Odyssey 2026 customer conference in Miami brought CISOs together to examine continuous, threat-informed supply chain security and the shift from periodic assessments to real-time risk operations.

February 2, 2026

What Is Cyber Incident Response and Why It Matters

Learn what cyber incident response is, the steps in the incident response lifecycle, and how to build effective incident response teams and playbooks.

January 23, 2026

Critical Update: What Security Leaders Need to Know Right Now About the Future of CISA and Threat Sharing

Discover how the expiration of the Cybersecurity Information Sharing Act (CISA 2015) disrupted threat intelligence, weakened national security, and widened AI-driven attack gaps. SecurityScorecard’s Mike Centrella and Dr. Aleksandr Yampolskiy explain what’s at stake as the January 2026 deadline nears amid a potential government shutdown.

January 21, 2026

What is a Parked Domain?

Learn what is a parked domain, why people park domains, and the security risks they create. Discover how to protect your attack surface from hidden threats.

January 21, 2026

Cyber Resilience in 2026: Why Supply Chains Are the New Front Line

The World Economic Forum’s Global Cybersecurity Outlook 2026 delivers a clear message for leaders across government and industry: cyber risk no longer lives inside the firewall.

January 17, 2026

What Is a Brute Force Attack and How to Prevent It

What is a brute force attack, how attackers use password cracking methods to gain access, and proven strategies to protect yourself.