Research

Global Third-Party Cybersecurity Breach Report

In-depth analysis of the most significant third-party cyber risks and incidents in 2023

United Arab Emirates Cybersecurity: Supply Chain Threat Report

This research presents an analysis of the cybersecurity landscape of the top 30 companies in the United Arab Emirates (UAE) by revenue. Companies were ranked based on various factors, such as: network security, potential malware infections, and patching cadence.

Cyber Conflict And The Erosion Of Trust: Introducing the Cyber Resilience Scorecard

Our report explores the intricate dynamics between cyber threats, economic resilience, and the vital component of societal trust.

North Korean State-Sponsored Cyber Attack: Unveiling the Intricacies of Threat Actor Group Andariel

This SecurityScorecard threat research sheds light on a significant cyber attack attributed to North Koreans tate-sponsored actors known as Andariel, emphasizing the critical role that South Korea plays both as a target and a source of infrastructure for these threat actors.

Cyber Risk Intelligence: SecurityScorecard Analysis of Traffic Involving Storm-0558 IoCs

Cyber Threat Intelligence Update: New Claims of Attacks Against Israeli SCADA Systems

Japan’s Nikkei 225 Index: The State of Cybersecurity in Japan

This research presents an analysis of the cybersecurity landscape of the Nikkei 225 index. Companies were ranked based on various factors, such as network security, potential malware exploits, and patching cadence.

Energy Sector Cybersecurity Report: Navigating Third-Party Cyber Risk

SecurityScorecard threat researchers have identified that 90% of the world’s largest energy companies experienced a third party breach in the past 12 months. Fueling the global economy and daily life, reliance on the energy sector elevates it as a prime target for cyberattacks.

Cyber Risk Intelligence: Idaho National Laboratory Data Breach

On November 20, a spokesperson for Idaho National Laboratory (INL) confirmed that it had suffered a data breach. The confirmation followed the SiegedSec threat actor group’s circulation of claims that it had “accessed hundreds of thousands of user, employee and citizen data” on social media and hacking forums.

Cyber Risk Intelligence: Iran-Linked Attack on U.S. Water Treatment Facility

On November 25, a U.S. municipal water authority confirmed that one of its booster stations had suffered an attack by a threat actor group known as CyberAv3ngers, which analysts believe acts in support of Iranian geopolitical interests.

Cyber Risk Intelligence: Exploitation of CVE-2023-47246

New Deep and Dark Web Collections Regarding the Israel-Hamas War