Resource Listing

Research
Close Encounters in the Public Sector
May 25, 2023
SecurityScorecard and the Cyentia Institute recently teamed up to analyze data collected on over 230,000 organizations for clues about the underlying conditions exacerbating third- and fourth-party risk. We measured the extent of digital supply chains, investigated the prevalence of security incidents among third- and fourth-party vendors, and explored the effects of that exposure to gain insights on better managing risk. This document summarizes key findings from that research using a subset of the data focusing on 7,347 public sector organizations.
More Details
Public Sector
Data Sheet
Discover what customers love about SecurityScorecard
August 30, 2023
Read how organizations use the SecurityScorecard platform to fit their specific needs, while improving visibility, and saving time and resources.
More Details
Security Ratings
Slides
Expect The Unexpected: A Guide To The Q4 ’23 Release
October 23, 2023
Security from A to F. Your digital guide to the Q4 ‘23 Release. An overview of the 30+ new innovations, services, and integrations, including screenshots and release notes. Plus additional additional guides, education and videos that will help you operationalize the Q4 ‘23 Release.
More Details
Research
Cyber Risk Intelligence: Iran-Linked Attack on U.S. Water Treatment Facility
December 4, 2023
On November 25, a U.S. municipal water authority confirmed that one of its booster stations had suffered an attack by a threat actor group known as CyberAv3ngers, which analysts believe acts in support of Iranian geopolitical interests.
More Details
Public Sector
Research
Cyber Risk Intelligence: Idaho National Laboratory Data Breach
December 5, 2023
On November 20, a spokesperson for Idaho National Laboratory (INL) confirmed that it had suffered a data breach. The confirmation followed the SiegedSec threat actor group’s circulation of claims that it had “accessed hundreds of thousands of user, employee and citizen data” on social media and hacking forums.
More Details
Public Sector
Research
Japan’s Nikkei 225 Index: The State of Cybersecurity in Japan
December 12, 2023
This research presents an analysis of the cybersecurity landscape of the Nikkei 225 index. Companies were ranked based on various factors, such as network security, potential malware exploits, and patching cadence.
More Details
Cyber Threat Intelligence, Security Ratings
Research
North Korean State-Sponsored Cyber Attack: Unveiling the Intricacies of Threat Actor Group Andariel
January 10, 2024
This SecurityScorecard threat research sheds light on a significant cyber attack attributed to North Koreans tate-sponsored actors known as Andariel, emphasizing the critical role that South Korea plays both as a target and a source of infrastructure for these threat actors.
More Details
Cyber Threat Intelligence
White Paper
Security Ratings: A New Horizon
January 9, 2024
Unveiling a new Security Ratings methodology for Telecommunications, Internet Service Providers, and Cloud Providers
More Details
Attack Surface Management, Cyber Threat Intelligence, Enterprise Cyber Risk, Security Ratings, Supply Chain Cyber Risk
Research
Energy Sector Cybersecurity Report: Navigating Third-Party Cyber Risk
December 5, 2023
SecurityScorecard threat researchers have identified that 90% of the world’s largest energy companies experienced a third party breach in the past 12 months. Fueling the global economy and daily life, reliance on the energy sector elevates it as a prime target for cyberattacks.
More Details
Cyber Threat Intelligence
Research
Cyber Conflict And The Erosion Of Trust: Introducing the Cyber Resilience Scorecard
January 15, 2024
Our report explores the intricate dynamics between cyber threats, economic resilience, and the vital component of societal trust.
More Details
Cyber Threat Intelligence
Research
Volt Typhoon Compromises 30% of Cisco RV320/325 Devices in 37 Days
The SecurityScorecard Threat Research, Intelligence, Knowledge, and Engagement (STRIKE) Team has identified new infrastructure that appears to be linked to the threat actor group tracked as Volt Typhoon. Volt Typhoon is a state-sponsored group based in China that typically focuses on espionage and information gathering. Approximately 30% of the Cisco RV320/325 devices observed by SecurityScorecard in a 37-day period may have been compromised by Volt Typhoon.
More Details
Cyber Threat Intelligence
Research
Log4j Security Vulnerability
December 17, 2021
Understanding the Origins, Implications, and What It Means for You. The SecurityScorecard Global Investigations team continues its investigation of the Log4j vulnerability. Using our global scanning technology, we’ve developed insights into the scope and extent of the Log4j vulnerability.
More Details
Cyber Threat Intelligence