SecurityScorecard

📣 Something big is coming, and it's at RSAC.

Today, SecurityScorecard Unveils TITAN AI: A New Era of Threat-Informed Third-Party Risk Management

TPRM is evolving, and so are we.

🛡️ SecurityScorecard today announced TITAN AI at RSAC 2026 in San Francisco. TITAN AI replaces the reactive, manual grind of third-party risk management (TPRM) programs with AI-acceleration and predictive control.

🌐 TITAN AI is built on top of SecurityScorecard’s industry-leading Ratings and TPRM platform with AI-driven technology and enhanced threat intelligence, delivering a powerful solution built for the demands of today's risk landscape.

📊 The Numbers:
🔹 With TITAN AI, organizations will be able to automate the majority of the work traditionally required to manage vendor risk, reclaiming hours previously spent chasing vendors by reducing manual effort by up to 95%.
🔹 Organizations leveraging TITAN AI will identify and address third-party risk faster and more consistently, with customers achieving up to 75% fewer supply-chain breaches.
🔹 Vendor engagement soars with TITAN AI. A 9x higher vendor engagement will allow vendors to respond more quickly and resolve issues before they escalate.
🔹 TITAN AI provides 99.9% accurate risk attribution with a near-zero refute rate.

“Today, we're still redefining what's possible. Many teams still spend too much time stuck in manual, compliance-driven processes that don’t actually reduce risk. TITAN AI is our answer to that problem.” – Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard

📘 Read the full press release here: securityscorecard.com/resources/pres…

#cybersecurity #pressrelease #TitanAI #cybernews #SecurityScorecard #artificialintelligence #TPRM #ThirdPartyRiskManagement #SecOps #RiskOps #RSAC2026 #AI

Attackers have reportedly raised French blood supply cold storage rooms from -30°C to 110°C in recent days.

🩸 The attack path ran through a vendor’s remote monitoring tool, built on a component from yet another vendor.

That’s three layers of third-party risk between the attacker and the freezer.

Ask these questions about the vendors that reach your physical systems:
🌐 Which vendors have remote access to your cold chain, building controls, and medical equipment?
🔌 Are those connections exposed to the public internet?
⚠️ Do local alarms and separate sensors back up your monitoring software?
📊 Are you tracking vendor security posture continuously, or just periodically?

Learn more about what this attack means for your third-party risk program: securityscorecard.com/blog/cyberatta…

#cybersecurity #threatintel #TPRM #healthcare #supplychain #attacksurface #cyberrisk

🧊 Supermarket refrigeration attacks are making headlines again.

SecurityScorecard’s STRIKE Threat Intelligence Team has spotted exposed refrigeration controllers being abused.

STRIKE found a suspected SMTP botnet that includes confirmed Dixell/Copeland XWEB PRO controllers. These devices run refrigeration at supermarkets and cold storage facilities.

This activity shows that exposed controllers threaten the cold chain and also serve as tools for abuse.

👉 Our findings indicate that exposed industrial controllers are being used well beyond their original job, and the signals that reveal a compromised unit are straightforward to detect.

Read the research for IOCs and more detail: securityscorecard.com/blog/a-dish-se…

#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #driftnet

SecurityScorecard’s STRIKE Threat Intelligence Team built GFMX, a fingerprinting technique that identifies the software behind a certificate. Available soon on Driftnet.

📊 Built with post-quantum calibration in mind, it links certificates by the software that generated them, even when every name, key, and hash differs.

📣 Every certificate in SecurityScorecard’s Driftnet internet scans now carries a GFMX value. This allows defenders to better identify malicious threat actor infrastructure.

Where to use GFMX:
• Infrastructure hunting, going from one C2 or phishing certificate to every server built from the same kit.
• Malware triage, grouping executables, drivers, and APKs by the builder that signed them.
• Exposure inventory, recognizing an appliance or its firmware from its default certificate.
• Post-quantum tracking, seeing where ML-DSA, ML-KEM, and hybrid certificates appear.

👉 Read the announcement and how to gain access: securityscorecard.com/blog/announcin…

#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #fingerprinting #postquantum

Why did the hacker keep asking whether you liked his shoes? 👟

He was phishing for compliments. 😅

SecurityScorecard CEO and Co-Founder Dr. Aleksandr Yampolskiy collected more than 250 jokes like it in his new book, CTRL + ALT + DEFEAT.

Expect punchlines on:

🔐 Passwords, phishing, and pentesters
🤝 Vendors, questionnaires, and third-party risk
🤖 CISOs, SOC teams, and AI agents

👉 Get the ebook and share a laugh with the security team that understands the job best: securityscorecard.com/resources/eboo…

#CISO #CTO #cybersecurity #vendorriskmanagement #supplychain #TPRM #cyberrisk #cybersecurityhumor