AI-powered, threat-informed third-party risk management. Continuous visibility and predictive intelligence to secure global supply chains.
New York City
Joined January 2014
- Tweets9.5K
- Following2.3K
- Followers9.2K
- Likes2.9K
Pinned Tweet
📣 Something big is coming, and it's at RSAC.
Today, SecurityScorecard Unveils TITAN AI: A New Era of Threat-Informed Third-Party Risk Management
TPRM is evolving, and so are we.
🛡️ SecurityScorecard today announced TITAN AI at RSAC 2026 in San Francisco. TITAN AI replaces the reactive, manual grind of third-party risk management (TPRM) programs with AI-acceleration and predictive control.
🌐 TITAN AI is built on top of SecurityScorecard’s industry-leading Ratings and TPRM platform with AI-driven technology and enhanced threat intelligence, delivering a powerful solution built for the demands of today's risk landscape.
📊 The Numbers:
🔹 With TITAN AI, organizations will be able to automate the majority of the work traditionally required to manage vendor risk, reclaiming hours previously spent chasing vendors by reducing manual effort by up to 95%.
🔹 Organizations leveraging TITAN AI will identify and address third-party risk faster and more consistently, with customers achieving up to 75% fewer supply-chain breaches.
🔹 Vendor engagement soars with TITAN AI. A 9x higher vendor engagement will allow vendors to respond more quickly and resolve issues before they escalate.
🔹 TITAN AI provides 99.9% accurate risk attribution with a near-zero refute rate.
“Today, we're still redefining what's possible. Many teams still spend too much time stuck in manual, compliance-driven processes that don’t actually reduce risk. TITAN AI is our answer to that problem.” – Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard
📘 Read the full press release here: securityscorecard.com/resour…
#cybersecurity #pressrelease #TitanAI #cybernews #SecurityScorecard #artificialintelligence #TPRM #ThirdPartyRiskManagement #SecOps #RiskOps #RSAC2026 #AI
SecurityScorecard is proud to share that it is the exclusive cybersecurity data provider for Forbes’ America’s Best Companies 2027 list, published today. 🏆
“Cybersecurity resilience belongs alongside profitability and EBITDA as a measure of corporate performance,” said Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard. “A company cannot truly succeed if it cannot protect its customers, operations, and reputation.”
“SecurityScorecard has been an invaluable partner in our annual America’s Best Companies project, by providing unique and comprehensive data on companies’ security performance and risks,” said Alan Schwarz, the Forbes Assistant Managing Editor who oversaw the project. “Few issues these days are more vital to a company than cybersecurity, and Forbes working with SecurityScorecard is a key component to educating our readers.”
Forbes combines cybersecurity with financial results, customer sentiment, employee ratings and other measures to evaluate overall company quality.
👉 Read the announcement and see how Forbes is weighing cyber resilience alongside financial performance here: securityscorecard.com/compan…
ALT This image features a press release banner with logos for SecurityScorecard and Forbes at the top. The headline reads, "Cyber Risk Is a Business Metric: SecurityScorecard Data Shapes Forbes’ America’s Best Companies Ranking." Below, it mentions how SecurityScorecard evaluates cybersecurity performance. A purple and gold abstract digital illustration appears on the right. There is a "Learn More" button at the bottom left.
ALT This image is a promotional graphic featuring logos of Security Scorecard and Forbes. It includes a quote about cybersecurity resilience from Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard. The background is purple, with text in white, and a small photo of Dr. Yampolskiy at the bottom.
ALT A promotional graphic featuring the logos of SecurityScorecard and Forbes. It includes a quote praising SecurityScorecard's role in the Forbes project on company security performance. The quote is attributed to Alan Schwarz, Assistant Managing Editor at Forbes, whose photo is shown in a circular frame. The background is a gradient of purple shades with geometric designs.
1
44
Today, SecurityScorecard honors every veteran who has served our country.
To the veterans in our community and across the cybersecurity field: thank you. Your service protects the people and institutions we all rely on.
Your discipline, teamwork, and sense of mission make our industry stronger.
SecurityScorecard’s team is grateful for everything you have given. Today, and every day, we honor all who served.
#VeteransDay #HonoringAllWhoServed #companyculture #cybersecurity
ALT A person in military uniform with an American flag patch is saluting. In the background, there is an American flag. The text reads "Veterans Day - Honoring All Who Served.
73
ICYMI: Attackers are going after the refrigeration systems that protect food and blood supplies.
SecurityScorecard’s STRIKE Threat Intelligence Team found a suspected SMTP botnet that includes confirmed Dixell/Copeland XWEB PRO controllers. Supermarkets and cold storage facilities rely on these devices to run their refrigeration. When exposed, they endanger the cold chain and give attackers infrastructure to abuse.
In France, attackers reportedly raised blood supply cold storage rooms from -22°F to 230°F. The attack ran through a vendor’s remote monitoring tool, built on another vendor’s component. That makes three layers of third-party risk between the attacker and the freezer.
Ask your team:
🌐 Which vendors have remote access to your cold chain, building controls, and medical equipment?
🔌 Do those connections face the public internet?
⚠️ Do local alarms and separate sensors back up your monitoring software?
📊 Do you track vendor security posture continuously?
👉 Get the indicators of compromise (IOCs) and the signals that reveal a compromised controller: securityscorecard.com/blog/a…
👉 See what the France attack means for your third-party risk program: securityscorecard.com/blog/c…
#cybersecurity #threatintel #threatintelligence #TPRM #healthcare #supplychain #attacksurface #cyberrisk
🎯 Spot the findings that matter, then get vendors fixing them from one screen.
SecurityScorecard’s TITAN Secure turns open findings into vendor action. In this installment of our TITAN demo series, you see the full remediation workflow from start to finish.
✅ Filter open findings with presets like Emerging Threat Watch
📩 Request remediation from vendor contacts in a few clicks
💬 Follow vendor responses in the Communication Center
🔐 Review resolved findings as vendors close them out
📺 Watch the demo below
👉 See TITAN in action and learn how your team moves from open findings to resolved vendor risk: securityscorecard.com/resour…
#cybersecurity #TPRM #TitanAI #vendorriskmanagement #ThirdPartyRiskManagement #cyberrisk
64
Attackers have reportedly raised French blood supply cold storage rooms from -30°C to 110°C in recent days.
🩸 The attack path ran through a vendor’s remote monitoring tool, built on a component from yet another vendor.
That’s three layers of third-party risk between the attacker and the freezer.
Ask these questions about the vendors that reach your physical systems:
🌐 Which vendors have remote access to your cold chain, building controls, and medical equipment?
🔌 Are those connections exposed to the public internet?
⚠️ Do local alarms and separate sensors back up your monitoring software?
📊 Are you tracking vendor security posture continuously, or just periodically?
Learn more about what this attack means for your third-party risk program: securityscorecard.com/blog/c…
#cybersecurity #threatintel #TPRM #healthcare #supplychain #attacksurface #cyberrisk
ALT A person in medical attire checks inventory in a blood bank storage area with shelves of blood bags. There is text about a cyberattack on blood banks in France, discussing temperature changes through a vendor's remote monitoring tool, with a focus on reducing third-party operational technology risk. A button reads "Read the Blog.
2
110
140
🧊 Supermarket refrigeration attacks are making headlines again.
SecurityScorecard’s STRIKE Threat Intelligence Team has spotted exposed refrigeration controllers being abused.
STRIKE found a suspected SMTP botnet that includes confirmed Dixell/Copeland XWEB PRO controllers. These devices run refrigeration at supermarkets and cold storage facilities.
This activity shows that exposed controllers threaten the cold chain and also serve as tools for abuse.
👉 Our findings indicate that exposed industrial controllers are being used well beyond their original job, and the signals that reveal a compromised unit are straightforward to detect.
Read the research for IOCs and more detail: securityscorecard.com/blog/a…
#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #driftnet
ALT Blog graphic titled "A Dish Served Lukewarm: The Refrigerator Botnet" with a description about security issues in internet-connected refrigeration control software. Below is an open refrigerator filled with various food items. There is a "Read the Blog" button.
1
91
SecurityScorecard’s STRIKE Threat Intelligence Team built GFMX, a fingerprinting technique that identifies the software behind a certificate. Available soon on Driftnet.
📊 Built with post-quantum calibration in mind, it links certificates by the software that generated them, even when every name, key, and hash differs.
📣 Every certificate in SecurityScorecard’s Driftnet internet scans now carries a GFMX value. This allows defenders to better identify malicious threat actor infrastructure.
Where to use GFMX:
• Infrastructure hunting, going from one C2 or phishing certificate to every server built from the same kit.
• Malware triage, grouping executables, drivers, and APKs by the builder that signed them.
• Exposure inventory, recognizing an appliance or its firmware from its default certificate.
• Post-quantum tracking, seeing where ML-DSA, ML-KEM, and hybrid certificates appear.
👉 Read the announcement and how to gain access: securityscorecard.com/blog/a…
#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #fingerprinting #postquantum
ALT An informative graphic titled "GFMX: An X.509 Fingerprinting Technique for the Post-Quantum Era" with a section labeled "Blog." It highlights that while attackers can generate new certificates quickly, the software creating them rarely changes. A hand points to a fingerprint icon on a digital interface with various charts and a "Read Now" button.
82
Why did the hacker keep asking whether you liked his shoes? 👟
He was phishing for compliments. 😅
SecurityScorecard CEO and Co-Founder Dr. Aleksandr Yampolskiy collected more than 250 jokes like it in his new book, CTRL + ALT + DEFEAT.
Expect punchlines on:
🔐 Passwords, phishing, and pentesters
🤝 Vendors, questionnaires, and third-party risk
🤖 CISOs, SOC teams, and AI agents
👉 Get the ebook and share a laugh with the security team that understands the job best: securityscorecard.com/resour…
#CISO #CTO #cybersecurity #vendorriskmanagement #supplychain #TPRM #cyberrisk #cybersecurityhumor
🏛️ U.S. cyber strategy is moving from defense to disruption. The first thing that shift requires is visibility.
The White House, the FBI, and the Departments of War and Energy all now stress anticipating and disrupting threats. The Cybersecurity and Infrastructure Security Agency (CISA) calls for an “aggressive, anticipatory stance.”
In a new blog, SecurityScorecard’s Head of Public Policy Michael Centrella explains what it takes to act on that strategy:
🔭 Why adversaries hunt for the weakest point across an ecosystem rather than one organization at a time
⚖️ Why potential consequences should set priorities ahead of raw severity scores
📍 How SecurityScorecard’s Project Meridian shows where risk concentrates and which fixes reach furthest
👉 Read Michael’s analysis and see how ecosystem-wide visibility helps government leaders decide where to act first: securityscorecard.com/blog/f…
#cybersecurity #criticalinfrastructure #PublicSector #govtech #cyberrisk #attacksurface #ProjectMeridian
CanOworms sells anonymity by relaying others’ traffic.
SecurityScorecard’s STRIKE Threat Intelligence Team found CanOworms, a 633-server network attackers lease to hide where malware and intrusions originate. Rent a server, and your traffic exits through someone else’s IP address. Trace the attack back, and you reach a rented relay. Attackers stay hidden.
STRIKE used SecurityScorecard’s Driftnet internet-scanning engine to pivot from known indicators to one certificate, then to the full CanOworms network.
Here is what STRIKE found:
🪱 CanOworms’ tenants range from commodity malware operators to suspected state-linked actors.
🔄 Adversaries swap IPs and domains faster than blocklists can update, so chasing them individually keeps defenders a step behind.
🔍 Persistent, rentable networks can outlast address changes, so defenders should track behavior instead of reputation.
👉 Watch Richard Hummel and Gilad Friedenreich Maizles explain how they unmasked CanOworms.
Learn which signals you can track to catch attackers even if they are rotating addresses: brighttalk.com/webcast/19566…
#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #Driftnet
75
99
✈️ Names, reservation codes, and flight details make phishing emails look real. The Amadeus breach exposed all three for 92,000 Japan Airlines customers.
Hackers accessed reservation data through Amadeus IT Group, the provider behind Japan Airlines’ reservation, ticketing, and check-in systems.
About 2,000 customers also had passport numbers, email addresses, and phone numbers stolen. A single breach at a third-party vendor can cascade across every company that relies on it, exposing tens of thousands of people without ever touching the victims’ own networks.
If a vendor holding your customer data got breached tomorrow, would you know before the breach notice arrived? The longer it takes a customer to learn that a vendor was compromised, the more damage the breach can do.
Three steps to start this week:
🔐 Map the vendors that handle your customer data
📊 Replace annual questionnaires with real-time evidence
🚨 Add vendor incidents to your response playbook
👉 Read the blog and see how outside-in monitoring helps your team spot vendor exposure before a breach notice arrives: securityscorecard.com/blog/t…
#cybersecurity #TPRM #vendorriskmanagement #thirdpartyrisk #supplychain #cyberrisk #Japan
1
159
🏥 Attackers don’t wait for visiting hours. They look at hospitals’ internet-facing systems around the clock, and leaders can now look, too.
SecurityScorecard’s new report, “Visiting Hours,” shows what attackers see when they scan U.S. healthcare systems from the outside.
It draws on Project Meridian, our geospatial intelligence platform that shows cyber and physical risk across the nation’s 16 critical infrastructure sectors as one connected system. It covers approximately 40,000 healthcare records across 2,979 counties.
🚨 1 in 7 records (5,862) carries a Known Exploited Vulnerability (KEV) flag, a bug criminals already use in real attacks
✅ 62.5% of graded records earn an A or B, but 1 in 6 earns a D or F
⚠️ A top grade can still hide risk: one Texas health system earned an A while running eight urgent vulnerabilities on live machines
🔑 3,767 records (9.6%) show leaked-password signals
🔗 In Texas, 11 of 12 hospital groups use Microsoft, so one supplier failure can ripple across many hospitals
📍 Rural clinics score a D or F more often (16.7%) than hospitals (15.2%), but the next facility can sit 30 miles away
The encouraging part: in our Texas case study, 316 possible vulnerabilities narrowed to nine confirmed on live systems. A small team can work through that list in weeks.
👉 Read the report and see what attackers see in your region, plus a 30-day plan your team can start this week to act on the findings: securityscorecard.com/resour…
#cybersecurity #healthcare #TPRM #cyberrisk #attacksurface #threatintel #ProjectMeridian
📰 CPO Magazine reports a data breach at Burger King Japan exposed more than 11 million customer records tied to its official app.
SecurityScorecard CEO and Co-Founder Dr. Aleksandr Yampolskiy shared what our external data shows across Burger King’s broader footprint:
🔍 A D rating (61 out of 100), with a 31-point downward indicator
⚠️ 2,460 findings, including 63 critical-CVSS vulnerability observations across 32 distinct CVEs
📊 F-rated companies were 13.8 times more likely to experience a breach than A-rated companies
These findings require validation, and we have not connected them to the Japan breach.
Yampolskiy’s takeaway: “One compromised account or application should not provide unrestricted access to customer data.”
👉 Read the full coverage and see why Zero Trust segregation and access controls matter for customer data: cpomagazine.com/cyber-securi…
#cybersecurity #TPRM #cyberrisk #vendorriskmanagement #thirdpartyrisk
24
135
You can’t secure an attack surface you haven’t measured.
Snyk’s Manoj Nair says SecurityScorecard's TPRM Benchmark gives security teams a shared, transparent way to evaluate AI models on capability and attack resistance together. Snyk’s own research backs up the need: across 3,000 enterprise environments, 74.5% of those with a detected model reference at least one that scores “high” on an attacker goal under adversarial testing.
Thank you, @snyksec & @mnair1, for the support.
Explore the benchmark: tprmbenchmark.com/
Thanks @security_score and @ayampolskiy for including @snyksec in the TPRM Bench launch. You can't secure an attack surface you haven't measured. This scores models on capability and attack resistance together, with an autonomy level from L0 to L4.
1
97
AI now sits on both sides of the fight, and unexpected model behavior can become an incident for defenders or an opportunity for attackers.
GreyNoise’s Corey Bodzin says his team has seen attackers’ AI use leave identifiable tells, and defenders’ models make mistakes. His perspective on SecurityScorecard's TPRM Benchmark: objective, transparent measurement puts evidence of model performance on the table, so defenders can adopt AI with a clear view of its strengths and limits.
Thank you @GreyNoiseIO for the support.
Explore the benchmark: tprmbenchmark.com/
AI is now part of both attacker and defender tooling. But how do you know if the AI you’re relying on actually holds up? @security_score launched the world’s first TPRM AI Benchmark today to test exactly that.
GreyNoise's Chief Product Officer, Corey Bodzin weighs in on why objective, transparent measurement matters for defenders adopting AI.
Read more: securityscorecard.com/compan…
72
📣 SecurityScorecard just launched the first AI Third-Party Risk Management (TPRM) Benchmark.
Can AI manage third-party risk without becoming part of the risk? Now you can test both sides before you deploy a model.
🎯 Capability: Scores models on exposure triage, breach correlation, vendor concentration, and vulnerability prioritization
🛡️ Resilience: Grades models A to F against prompt injection, jailbreaks, and deceptive vendor inputs
🏁 Autonomy: Rates each model from L0 to L4 to show where humans still need to stay in control
Early runs show open-weight models closing the gap with frontier models on supply chain security tasks. Several remain susceptible to adversarial attacks.
The framework is open source. AI labs, security vendors, and researchers can test models and join the public leaderboard.
🤝 We’re grateful to the industry and academic leaders who weighed in on why measuring AI matters, including @nyuniversity Yevgeniy Dodis, @UMIDSC University of Miami Frost Institute for Data Science & Computing Dr. @YelenaYesha, @GreyNoiseIO Corey Bodzin, @SimSpaceCorp Peter Lee, @snyksec @mnair1, and our very own @ayampolskiy and Mike Mylrea
👉 Read the announcement and see how the benchmark tests whether AI can do the work and resist manipulation: securityscorecard.com/compan…
#cybersecurity #artificialintelligence #ThirdPartyRisk #TPRM #supplychainsecurity #cyberrisk
PHP2Shell kicked off “Black October.” Attacks on Node, GitLab, and others have followed close behind.
When a zero-day hits, your supply chain gets blindsided. We looked at two PHP2Shell CVEs and found 10 vendors with 20,000+ open findings apiece and no response. When nothing looks more urgent than anything else, a bulk “please fix your stuff” ask isn’t defensible, and vendors deprioritize it.
Here’s how TITAN AI changes that, in about three minutes:
→ Filter Findings to the two PHP2Shell CVEs
→ Group by vendor to see exactly who’s exposed
→ Select, choose Request Remediation, and send a specific, CVE-level ask to every exposed vendor in one click
→ Track who’s been asked with a flagged column
Then automate it. Workflows link a trigger to conditions and actions, so a confirmed breach event can fire vendor outreach on its own. You decide how much runs automatically and how much waits for a person.
Watch the PHP2Shell response in action below!
#ThirdPartyRisk #SupplyChainSecurity #ZeroDay #PHP2Shell #TITANAI
New Research Drop: Two TeamPCP suspects have been arrested for their alleged roles in a supply chain campaign, but their attack blueprint lives on. What SecurityScorecard’s STRIKE Threat Intelligence Team is unveiling today:
-Coding bugs in the worm: STRIKE’s static analysis found defects that can covertly change the worm’s path, so a missing artifact does not prove a stage did not run.
-Examples include: Health checks that skip await and can block the backup exfiltration route, uploads that count as sent even when they fail, unresolved Windows file paths, and a security-tool check that is defined but never called.
-A response-order consequence: Blocking network access can make the worm’s npm check fail and trigger the wipe. Responders should stop the malware before blocking the network, not just before revoking tokens.
Come for the worm, stay for the connected alliance map: STRIKE conducted dark web research, linking dark web forum posts and leak-site posts to show how TeamPCP worked with five partner groups:
📣 BreachForums recruited affiliates and hosted the Shai-Hulud worm
💰 xpl0itrs turned raw access into targeted intrusions
🔓 LAPSUS$ converted stolen credentials into paid extortion
💥 Vect Ransomware tried to encrypt victims, but a flaw turned it into a wiper
🕵️ ShinyHunters turned on TeamPCP, hijacked the credentials, and kept the proceeds
👉 Read the full STRIKE analysis for details on the worm — and see which relationships were real partnerships and which appear a little more one-sided:
securityscorecard.com/wp-con…
#cybersecurity #threatintel #threatintelligence #TPRM #attacksurface #cyberrisk #supplychain
25
246
📊 Reviewing a vendor questionnaire answer by answer takes hours your team doesn’t have.
In this installment of SecurityScorecard’s TITAN demo series, see how TITAN AI scores and analyzes assessments automatically.
You set the criteria once at the template level. Our platform handles the review when the supplier submits.
✅ Set pass and fail weighting for each risk metric
🤖 Check answers against your policy and the supplier’s uploaded evidence
📥 Pull answers from documents already in the vendor’s profile
In the demo, one assessment returns 36 passed answers, 2 failed, 4 partial, and 4 empty. You can drill into each section to see why.
📺 Watch the demo below
👉 See how to get a questionnaire health score and risk score without reviewing every response by hand: securityscorecard.com/resour…
#cybersecurity #TPRM #TitanAI #vendorriskmanagement #ThirdPartyRiskManagement #cyberrisk
97
221