Product News

Find out about our new product features, the latest platform changes, and discover company announcements before anyone else.

Risk Management

Stay up to date on third-party risk management best practices and techniques, and learn about new regulations for third party risk.

Security Research

Keep up with research around the biggest data breaches, malware infections, IoT risks and all the latest news in cybersecurity.

The Current State of UK Bank Security

SecurityScorecard Digs into the Grades of UK Banks A Freedom of Information request in the UK has revealed 791 data breaches occurred at most of the region’s major banks since the start of 2013 (with 585 of the incidents occurring in 2014).  The FOI request was spawned by Egress Software Technologies, an email encryption provider, that recently reported … Continued

UPDATE: Feds Breached Again, Lose 21.5 Million Records

UPDATE: Feds Breached Again, Lose 21.5 Million Records

SecurityScorecard Finds Federal Department Had Poor Security Hygiene, Especially in IP Reputation LATEST UPDATE: The number of people affected by the OPM breach is now over 21.5 million, according to The New York Times. UPDATE: BloombergBusiness reported the numbers of employee and contractor records stolen could now be up to 14 million. The news organization … Continued

Read More
The Calm Before the Mobile API Data Breach Storm

The Calm Before the Mobile API Data Breach Storm

Prediction: Mobile App Security Practices Will Become a Third Party Data Risk Mobile security may not be as easy to exploit as other established attack styles, but this latest news could change that for the worse. The Center for Advanced Security Research Darmstadt (CASED) in Germany has responsibly disclosed a cloud application security issue it discovered and published … Continued

Read More
Gone in 60 Seconds: Verizon Breach Report Reveals 60% of Enterprise Attacks Succeed in Minutes

Gone in 60 Seconds: Verizon Breach Report Reveals 60% of Enterprise Attacks Succeed in Minutes

by Alexander Heid Chief Research Officer SecurityScorecard.com (NEW YORK, NY) – During April 2015, Verizon released their annual breach report  which identifies ongoing trends within enterprise cyber attacks. This year, the primary focus of the breach report centered around the prolific rise in phishing attacks that spread malware, and rise of of web application vulnerability attacks … Continued

Read More
Millions of Anthem customers alerted to hack

Millions of Anthem customers alerted to hack

by Elizabeth Weise, USATODAY Health insurer Anthem said hackers infiltrated its computer network and gained access to a host of personal information for customers and employees, including CEO Joseph Swedish. SAN FRANCISCO —Millions of Anthem health insurance customers woke Thursday morning to an e-mail from the company telling them hackers had gained access to the … Continued

Read More
What Social Enterprises Should Know About Cyber Security

What Social Enterprises Should Know About Cyber Security

Anne Field Contributor 2014 was, of course, quite the year for revelations about cyber attacks and data breaches at major companies like Sony , JP Morgan Chase , Home Depot HD -2.13%, and a host of others. But there also have been a lot of incidents at NGOs and government agencies, according to Alexander Heid, … Continued

Read More
New wave of credit card fraudsters opt for in-store pickup option

New wave of credit card fraudsters opt for in-store pickup option

Pilfered card data, Zip codes used by fraudsters to pick stores close to victims. by Sean Gallagher – Dec 4, 2014 12:42pm EST  Credit card breaches are the gift that keeps on giving—to Eastern European cybercriminals, at least. Taking advantage of the loosened security that comes with the holiday gift-buying rush, recent traffic on underground … Continued

Read More
Online or at Store Registers, Shoppers Worry About Hacks

Online or at Store Registers, Shoppers Worry About Hacks

BY CADIE THOMPSON Retail hacks have consumers thinking twice about how they will shop this holiday season. After a year of breaches, consumers don’t feel safe anymore when shopping online, and some are even straying from their favorite retailers as a result, according to a recent survey. “The number of breaches and the caliber of … Continued

Read More
The POODLE Vulnerability: Is the Dog's Bark Worse Than the Bite?

The POODLE Vulnerability: Is the Dog’s Bark Worse Than the Bite?

(October 27, 2014) – The instant the POODLE vulnerability within SSLv3 [CVE-2014-3536] was identified, SecurityScorecard R&D team moved to determine how much of the public  Internet was affected by this potentially severe security exposure. In addition, to separate fact from fiction, we sought to determine how exploitable POODLE was, and assign a true risk rating … Continued

Read More
Fake DropBox Password Leak Allows Rippers to Flourish - $1 USD obtained

Fake DropBox Password Leak Allows Rippers to Flourish – $1 USD obtained

On October 13, 2014 SecurityScorecard threat intelligence monitoring sensors detected a significant rise in leaked password chatter originating from Pastebin.com, as shown in Figure 1.1. Unidentified individuals made several postings on the website claiming to be in possession of over 7 million breached Dropbox accounts, and released a sample set of 400 to the public. … Continued

Read More