Resources - SecurityScorecard Archived: 2026-10-25 02:25:22 UTC Blog Show all https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Page 1 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 PHP2Shell Customer Advisory: CVE-2026-109618 and CVE-2026-109619 Remediation Guide SecurityScorecard’s PHP2Shell advisory covers CVE-2026-109618 and CVE-2026-109619: SecurityScorecard patched its affected PHP site on release day and found no exploitation. See how the PHP2Shell vulnerability affects you and how to respond. STRIKE Alert STRIKE News Page 2 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Shared Dependencies Turn PHP Flaws Into a Public Service Risk Early reported attacks on two critical PHP flaws put organizations and public services at risk. Learn how to prioritize by mission impact and shared dependencies. STRIKE Alert STRIKE News Patch the runtime. Then verify the footprint. PHP2Shell refers to CVE-2026-109618 and CVE-2026-109619, each rated 9.2 Critical under CVSS v4.0. The PHP security team says both can lead to unauthenticated remote code execution. Updating a WordPress plugin or application framework does not replace updating the PHP runtime. STRIKE Alert STRIKE News Case Studies Show all Page 3 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Como a AXIA Energia fortalece a gestão de riscos cibernéticos de terceiros no setor de energia com a SecurityScorecard A AXIA Energia (antiga Eletrobras) é a maior empresa de energia 100% renovável do Hemisfério Sul e líder nos segmentos de geração e transmissão de energia elétrica no Brasil, respondendo por cerca de 17% da capacidade de geração nacional e por 37% das linhas de transmissão do Sistema Interligado Nacional (SIN). CEDIA Page 4 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Cómo CEDIA transformó la ciberresiliencia del ecosistema académico ecuatoriano con SecurityScorecard MRS Brazil Depoimento da MRS sobre como a SecurityScorecard trouxe visibilidade independente à postura de segurança externa da empresa, elevando o score a 100% e tornando a gestão de risco cibernético um indicador estratégico acompanhado por executivos e áreas técnicas. Data Sheet Show all Page 5 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Unrivaled Global Telemetry for Proactive Defense and Threat Hunting The TITAN AI Platform Corporate Overview SecurityScorecard introduced an industry-first customer transformation model, Supply Chain Resilience Journey, designed to help organizations understand exactly where their TPRM program stands today and how to advance it. The journey maps four progressive stages: Basic Diligence, Periodic TPRM, Continuous TPRM, and Threat- Informed TPRM. Page 6 of 29 Ebook Show all https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 TITAN Watch: Foundational Visibility and a clear understanding risk in your vendor ecosystem The TITAN Watch offering within SecurityScorecard’s TITAN AI platform helps organizations monitor risk in their extended supply chain and gain a clear understanding of their security posture. Page 7 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 CTRL + ALT + DEFEAT One day it’s the dark web and North Korean espionage. The next, it’s Mythos, autonomous agents, and risks we didn’t… The TPRM Team’s Guide to Threat Intellignece Third-party breaches rarely announce themselves through formal audit findings. They often start quietly: an exposed database, a forgotten subdomain, or… Page 8 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Threat-Informed Third-Party Risk Management (TPRM) Traditional third-party risk management runs on static assessments, manual communication, and processing timelines measured in weeks. A vendor completes a… Infographic Show all Page 9 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 The Total Economic Impact™ of the SecurityScorecard Platform SecurityScorecard reduced third-party breaches by 75% – ROI of 176% in Third-Party Incident Response Checklist No matter the size, region, industry, or revenue, every organization needs a straightforward methodology for tracking supply chain risk indicators and building an incident timeline. \r\n\r\nThe SecurityScorecard MAX team Page 10 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 created this checklist to ensure that your organization has a proactive plan in place to immediately respond to and mitigate supply chain incidents. Supply Chain Cyber Risk Third-Party Risk Management Leading the Way – SecurityScorecard ratings are the best predictor of breach in the industry Security ratings provide an objective and standardized way to assess the cybersecurity resilience of both small and large organizations. Security Ratings Learning Center Show all Page 11 of 29 What is Zero Trust Architecture? 9 Steps to Implementation on SecurityScorecard’s blog. Attack Surface Management Tech Center What is a Cybersecurity Posture and How Can You Evaluate It? https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Understanding what a Zero Trust Architecture is and how to implement one can help enhance security. Learn more Page 12 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Organizations across industries struggle to maintain robust security postures. While tremendous strides have been made in security technology, the fundamentals of establishing and maintaining a strong cybersecurity posture remain elusive for many organizations. Tech Center What is HIPAA Compliance? A Complete Guide What is HIPAA compliance? Learn essential requirements, common violations, and best practices for healthcare data protection and security. Tech Center Podcasts Show all Page 13 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Why India Is Emerging as a Third-Party Breach Hotspot SecurityScorecard experts analyzed why 52.6% of Indian vendors experienced at least one third-party breach in the past year in a recent webinar. India has become one of the most critical engines of the global digital economy and one of the most targeted. How to Protect Yourself Against Holiday Scammers: Mike Centrella on Cybercrime Magazine Podcast Page 14 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 In Episode 1 of Cybercrime Magazine’s podcast series with SecurityScorecard, Head of Public Policy Mike Centrella joins podcast host Charlie Osborne and Eastman CISO Adam Keown to explore safe holiday shopping, avoiding scams, and how to build cyber resilience this season. Report Show all Page 15 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 The Window to Catch a Vendor Breach Is Closing assessments can no longer keep pace… of a small U.S. municipal utility provider that… SecurityScorecard’s New Driftnet Engine Reveals America’s Small-Town Surveillance Blind Spot IDC Spotlight, sponsored by SecurityScorecard A 2026 IDC Spotlight shows why point-in-time vendor risk SecurityScorecard researchers used Driftnet’s internet-scale discovery capabilities to analyze the network footprint Page 16 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 STRIKE Alert STRIKE News Close Encounters in the Insurance Sector Cyber Insurance Research Show all Page 17 of 29 Catch Me If You… STRIKE Alert STRIKE News https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Catch Me If You Can: Inside the Anonymization-for-Hire Network In this briefing, Wade Lance VP, Product Marketing & Sales Enablement walks through STRIKE’s newest report Page 18 of 29 CanOworms is built… network after exposure. Instead,… STRIKE Alert STRIKE News Research Reports Show all https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Catch Me If You Can: New Research Reveals CanOworms, a Proxy Network for Hire Blocklists, geolocation, and ASN reputation all share one assumption: that an IP tells you who’s behind it. LapDogs Is Back: Inside UAT-7810’s Expanding ORB Network and Its New Servers Executive Summary: The latest Cisco Talos research shows these operators did not abandon the LapDogs ORB Page 19 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 2025 Supply Chain Cybersecurity Trends: Why Visibility Is the Next Competitive Advantage A handful of technology giants now control the infrastructure that powers the global economy. Traditional cybersecurity threats target individual companies,… Supply Chain Cyber Risk Third-Party Risk Management 北朝鮮による世界規模のデータ窃取攻撃 Page 20 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 北朝鮮のサイバー攻撃「Operation Phantom Circuit」の全貌を解明 最新レポートでは、北朝鮮のハッカ ー集団「Lazarus」による世界規模のサイバー攻撃の手口を詳細に分析。 サプライチェーン攻撃を通じ て正規ソフトウェアにバックドアを仕込み、企業や開発者の機密データを巧妙に奪取する手法が明ら かになりました。 233件以上の被害が確認された本攻撃の詳細や、サプライチェーンセキュリティを強 化するための対策をレポートでご紹介。レポートの完全版をダウンロードして、詳細なデータと分析 をご覧ください。 Japanese 日本におけるサードパーティサイバーリスクの現状 近年、日本におけるサードパーティを介したサイバー攻撃の割合は、世界平均を大幅に上回っていま す。本レポートでは、2024年春に発表されたグローバルサードパーティ侵害レポートの分析を基に、 日本特有のリスク要因を詳しく調査しました。 このレポートでは以下のポイントを中心に解説してい ます。 日本でのサードパーティ攻撃経路による侵害の特性と原因 各業界におけるサードパーティリス クの分布 国家支援型攻撃グループの動向と日本における影響 リスク管理を強化するための具体的な推 奨事項 製造、自動車、テクノロジー業界など、日本の主要産業における課題を明らかにし、サイバー リスク管理の向上に役立つ洞察を提供します。 レポートの完全版をダウンロードして、詳細なデータ と分析をご覧ください。 Japanese Resources Show all Page 21 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Insurance Authority of Hong Kong How the Insurance Authority of Hong Kong Strengthened Cyber Visibility and Risk Posture with SecurityScorecard Tens of thousands more ASUS routers pwned by suspected, evolving China operation STRIKE News Page 22 of 29 STRIKE News Tribune Show all https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 How to know if your Asus router is one of thousands hacked by China-state hackers L’approche du TPRM moderne repose sur une orchestration continue et contextualisée du risque Page 23 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Video Show all SecurityScorecard in the Public Sector Project Meridian: See the Connections. Act with Context. Public Sector Page 24 of 29 Demo Tuesdays Demo Tuesdays Webinars Show all Third Party Risk Management Is at an Inflection Point TITAN Secure – Drive Remediation Workflow Overview https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Titan AI: The AI Operating System for End-to-End Third Party Risk Management This is a demo of TITAN Secure’s drive remediation workflow — the workflow you use once you know availability or exposure exists on a vendor’s assets and you need it fixed. Page 25 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Cybersecurity After AI: What CISOs Must Unlearn to Stay Ahead Your Old Threat Hunting Playbook Is Dead: Inside the 633-Server Network Hiding Criminals and Nation-States Alike Attackers are increasingly renting the infrastructure that hides them instead of building it. SecurityScorecard’s STRIKE Threat Intelligence Team pulled back the curtain on one such operation: a 633-server proxy fleet, leased out to commodity malware crews and, at low confidence, suspected nation-state tenants. Page 26 of 29 STRIKE Alert STRIKE News White Papers Show all https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 When AI Moves Faster Than Your Security Team: Leading On Cyber Risk in 2026 Page 27 of 29 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 Meeting BNM RMiT 2025: A Guide to Third-Party & Supply Chain Cyber Risk Requirements On 28 November 2025, Bank Negara Malaysia issued one of the most significant overhauls to Malaysian financial sector cybersecurity regulation… TPRM: De la gestion statique au pilotage en temps réel Moderniser la gestion des risques tiers grâce à l’IA et à la Threat Intelligence Pendant des décennies, la gestion des… Page 28 of 29 TITAN MAX Service Source: https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 https://resources.securityscorecard.com/research/acasestudyofVjw0rm#page=1 TITAN MAX inserts technology and expertise at every stage of the vendor lifecycle to drive TPRM outcomes. Page 29 of 29