Resource Listing

Research
Investigation into Breached Australian Organizations
In mid-March, two Australian financial and professional services firms reported data breaches. These were followed by a series of cyber incidents affecting large Australian firms throughout 2022 and early 2023. As a result, some reporting on the incidents presented them as indications of systematic shortcomings in the country’s cyber defenses.
More Details
Cyber Threat Intelligence
Research
Investigation into Last Month’s Royal Ransomware Attack Against a City Government
On May 1, local media reported that a city government had suffered a disruption resulting from an attack claimed by the Royal ransomware group.
More Details
Cyber Threat Intelligence, Public Sector
Research
LockBit Ransomware Group Claims Attack Against Prominent Taiwanese Semiconductor Firm
On June 29, the LockBit ransomware group added an entry for a major semiconductor manufacturer to its data leak site.
More Details
Attack Surface Management, Cyber Insurance, Cyber Threat Intelligence, Supply Chain Cyber Risk
Webinar
Rebuilding Trust: Introducing the Global Cyber Resilience Scorecard
February 1, 2024More Details
Cyber Threat Intelligence, Public Sector
Webinar
Supply Chain Guardians: Strategies for Resilient Ecosystems
February 28, 2024More Details
Security Ratings, Supply Chain Cyber Risk
Research
SecurityScorecard Identifies Possible Flax Typhoon Infrastructure
On August 24, Microsoft published its analysis of espionage activity it attributes to a new threat actor group tracked as Flax Typhoon, which it assesses to act on behalf of the People’s Republic of China.
More Details
Cyber Threat Intelligence
Research
Cyber Risk Intelligence Update: STRIKE Team Investigation Identifies Possible Flax Typhoon Links to Higher Education
Following Microsoft’s identification of Flax Typhoon, a new threat actor group believed to conduct espionage on behalf of the People’s Republic of China (PRC), the STRIKE Team used SecurityScorecard’s data to investigate the IoCs Microsoft supplied in its report. This investigation yielded a collection of new IP addresses featuring the same TLS certificates that Microsoft linked to Flax Typhoon.
More Details
Cyber Threat Intelligence, Public Sector
Webinar
Managing Cyber Complexities in Supply Chain Risk Management
August 24, 2022More Details
Security Ratings, Supply Chain Cyber Risk
Webinar
The Fast & Frivolous: The Race for Vulnerability Remediation
September 13, 2022More Details
Attack Surface Management
Webinar
Quantifying Cyber Risk to Enable Business Growth
October 17, 2022More Details
Cyber Insurance
Webinar
Full Power of Attack Surface Data by Tying Internet Assets to Threat Context
October 26, 2022More Details
Attack Surface Management, Cyber Threat Intelligence
Webinar
Current Infrastructure Package and How It Impacts Cybersecurity
November 3, 2022More Details
Public Sector