“The business of business is relationships” – Robin Sharma In the intricate dance of modern business, the web of relationships extends far beyond the immediate connections we commonly consider in vendor risk management. As we explored in our previous RiskRecon Relationships Report, the complexity of your business relies not just on your third-party partners but…
One pivotal question echoes amongst the cyber community: “How will adversaries attack us, and what defenses should we prioritize?” This inquiry propels the industry’s quest for insights within the ever-shifting threat landscape. MITRE ATT&CK®, a beacon of knowledge, guides this journey with its repository of adversary tactics and techniques gleaned from real-world observations. However, amidst…
Navigating the cyber landscape can feel like a journey through uncharted territories, gaining valuable insights is akin to discovering treasures in a vast and murky realm. As we gather around the cyber table this Thanksgiving here are 10 revelations that are not only deepening our understanding of the digital battleground but are also equipping the…
Two decades ago, as I embarked on the journey of tracking stats in the dynamic realm of information security, the prevailing belief held insiders responsible for the lion’s share of cyber risk threats. This consensus persisted until our release of the first edition of the Verizon Data Breach Investigations Report (DBIR), a seminal moment that…
One common question I get for EPSS is, “Why does EPSS score CVEs low that are on the CISA KEV List?” The short answer is that the CISA Known Exploited Vulnerability List (KEV) (I think) relies on manual curation/vetting at a single point in time while EPSS is 100% data driven with a strong, on-going…
In today’s digital age, where information flows ceaselessly and competition is fierce, cybersecurity companies find themselves in a constant battle for attention. Navigating the cybersecurity content landscape to find the ‘sweet spot’ in crafting thought leadership content that resonates, differentiates, and truly engages the audience is no longer a simple task—it’s an art. Setting the…
In a world where data is the new gold, safeguarding against cybersecurity threats has become paramount for organizations of all sizes. Yet, despite the growing awareness of cyber risks, a significant challenge remains – the lack of concrete, data-driven insights into threat events. Traditional threat event analysis often relies on anecdotes and conjecture, leaving cybersecurity…
Cyentia Institute Forges Path to Enhanced Cyber Risk Assessment with Information Risk Insights Study (IRIS) Risk Retina® Threat Event Analysis Leesburg, Virginia — August, __ 2023 — The Cyentia Institute, known for its exceptional work in cybersecurity research, proudly announces a significant leap forward in the realm of cyber risk assessment with the launch of IRIS…
In today’s digital age, threat intelligence has become a buzzword in the cybersecurity realm. It’s often seen as a vital tool to fortify defenses and stay one step ahead of malicious actors. However, a recent study conducted by the Cyentia Institute, in collaboration with Cisco Secure, raises intriguing questions about the relationship between threat intelligence…
Innovative Partnership between Cyentia and Axio Drives Increased Confidence in Cyber Decision-Making for Information Security Professionals, C-Suite Executives, and Boards New York, NY and Leesburg, Virginia — August, __ 2023 — Axio, a leading SaaS provider of cyber risk management and quantification solutions, today announced a new joint initiative with Cyentia, a research and data science firm with…