Resources
Blog
Resource Library
January 20, 2023
Enterprise Cybersecurity: What it is & Why it’s Important
Having effective enterprise cybersecurity is more than having your employees create a password that isn’t their pet’s name—unless perhaps their cat’s name is at least 12 characters long, and a combination of upper- and lower-case letters and symbols. Whether it’s well-researched spearphishing attempts or bypassing MFA, threat actors have only become more daring. With the growing volume and
Tech Center
December 7, 2022
Hackers Are Using These 3 Techniques to Bypass MFA
Multi-factor authentication (MFA) is an essential security measure, but here are some frequently-used methods cyber-attackers leverage to bypass MFA.
Tech Center
November 30, 2022
9 Steps to Mitigate Ransomware Attacks for Your Business
Ransomware attacks are a top concern for many businesses as the threat landscape expands. Follow these 9 steps to help mitigate the risk for your business.
Tech Center
November 21, 2022
Mobile Device Forensics: Challenges, Threats, & Solutions
Mobile device forensics can help you recover lost or deleted data, as well as investigate a potential mobile security breach. Learn more.
Tech Center
October 19, 2022
What Drives Cyber Risk? Cyber Insurers and SecurityScorecard Reveal Answers
Seeking to stay ahead of hackers, many researchers have asked themselves what drives cyber risk. And many cyber insurance carriers have wondered how to accurately underwrite and price the risk. According to preliminary results from SecurityScorecard’s joint work with our cyber insurance partners, the answer is clear but multi-faceted.
Cyber Insurance
October 6, 2022
What is Cyber Risk Quantification? A Comprehensive Guide
Cyber risk quantification is the process of quantifying cyber risk by putting a monetary value on the potential impact of each prospective threat. Learn more.
Cyber Insurance
Executive Viewpoint
Tech Center
October 6, 2022
What is Cyber Risk Quantification? A Comprehensive Guide
Cyber risk quantification is the process of quantifying cyber risk by putting a monetary value on the potential impact of each prospective threat. Learn more.
Cyber Insurance
Executive Viewpoint
Tech Center
September 28, 2022
SecurityScorecard Partners with JCDC to Democratize Continuous Monitoring and Cybersecurity Risk Management
Cybersecurity is a team sport, and SecurityScorecard is proud to partner with the Joint Cyber Defense Collaborative (JCDC) to share cyber threat information in defense of public and private critical infrastructure.
Public Sector
September 6, 2022
TTPs Associated With a New Version of the BlackCat Ransomware
In this post, we describe a real engagement that we recently handled by giving details about the tools, techniques, and procedures (TTPs) used by this threat actor.
Cyber Threat Intelligence
STRIKE Team
August 31, 2022
Analysis of APT35 infrastructure reveals interest in Egyptian Shipping Companies
Executive Summary SecurityScorecard has identified domains resolving to Iran-linked Advanced Persistent Threat (APT) infrastructure, likely to be used to support phishing campaigns against Egypt-based shipping and marine services companies. In at least three instances, Iran-linked APT actors may have gained unauthorized access to the DNS configuration of legitimate domains to create rogue subdomains. CNAME records
STRIKE Team
August 2, 2022
Was the Explosion at Freeport LNG a Result of a Russian Cyber Attack?
Executive Summary On June 8, an explosion–which some commentators hypothesized was the result of a Russian cyber attack–took place at Freeport LNG’s liquefied natural gas (LNG) export facility in Quintana, Texas. SecurityScorecard’s platform revealed a number of vulnerabilities an attacker could have exploited. SecurityScorecard researchers observed some traffic involving Freeport IP space that may have
STRIKE Team
July 22, 2022
New: SecurityScorecard Extension for Chrome
With the new SecurityScorecard Chrome Extension, you can automatically see the simple A-F security rating of the websites you visit, enabling you to evaluate the risk of the sites you visit before supplying your data to them.
Security Ratings
July 20, 2022
5 Steps to Selecting a Vendor Risk Management Framework
Understand the risk you take on with your third parties and limit your liability. Here are 5 steps you can take to selecting a risk management framework.
Tech Center
July 13, 2022
8 Best Practices for Securing the Internet of Things (IoT)
The Internet of Things (IoT) is an interconnected network of devices. Discover how your organization can improve your overall IoT security with these best practices.
Tech Center
July 13, 2022
What is Mobile Forensics? Definition, Processes, & Examples
The difference between a contained mobile security incident and a company-ending breach often comes down to one thing: how quickly you can get answers. Mobile device forensics techniques proven by every law enforcement agency worldwide can cut your incident response time in half. When forensic analysis reveals exactly what happened, when, and how, you move
Tech Center
June 24, 2022
Top 5 Incident Response Best Practices You Should Follow
Incident response refers to the collection of active measures taken during a breach in order to halt the attack and mitigate the damage. In this post, we discuss incident response and a handful of best practices to follow.
Tech Center
June 24, 2022
What is Digital Forensics? Everything You Need to Know: How It Supports Cybersecurity, Incident Response, and Compliance
Digital forensics is a branch of forensics that focuses on finding, preserving, documenting, and analyzing any criminal evidence stored on digital devices.
Tech Center
June 23, 2022
Incident Response vs. Disaster Recovery: Key Differences
While they both fight the same threats to protect your business from a security threat and breach, incident response vs. disaster recovery plans have their differences. Learn more.
Tech Center
June 22, 2022
What is Vendor Tiering? Tips to Improve Your Vendor Risk Management
Vendor tiering is the process of identifying, analyzing, and classifying vendors based on their security risks. Learn how your business can improve your vendor risk management.
Tech Center
June 20, 2022
The Value of Communicating Risk Meaningfully Across the Business
While cybersecurity might be under the umbrella of IT, make no mistake: a breach will impact the entire business, making it the entire organization’s responsibility to be able to understand and take action on risk.\r\n\r\nYour organization needs to have a holistic view of risk that can enable technical and business conversations about cyber risk. By understanding not just the nuts and bolts of an exploit, but the impact it can have on employees, customers, and revenue, security experts and business leaders alike can then prioritize actions, budgets, and initiatives.
Tech Center
May 25, 2022
5 Ways to Effectively Prevent Data Leakage
Explore how you can stop data leakage with a solution that identifies and combats vulnerabilities inherent within your business. Learn more.
Tech Center