Welcome to our latest exploration into the evolving landscape of Third-Party Risk Management (TPRM). The 2024 State of TPRM Report, brought to you by RiskRecon and The Cyentia Institute, delves deep into the current state and emerging trends of TPRM across various industries, offering a comprehensive look at how practices have shifted since our last…
The release of Verizon’s 2024 Data Breach Investigations Report (DBIR) has been eagerly anticipated by the cybersecurity community, and Cyentia Institute is proud to announce our role as a contributing organization to this year’s report. The DBIR is renowned not only for its insights into cybersecurity threats and trends but also for its collaborative approach…
Innovative Partnership between Cyentia and Axio Drives Increased Confidence in Cyber Decision-Making for Information Security Professionals, C-Suite Executives, and Boards New York, NY and Leesburg, Virginia — August, __ 2023 — Axio, a leading SaaS provider of cyber risk management and quantification solutions, today announced a new joint initiative with Cyentia, a research and data science firm with…
The Exploit Prediction Scoring System (EPSS) is an open, data-driven effort for estimating the likelihood (probability) that software vulnerabilities will be exploited in the wild. We achieve that by collecting ground-truth information about which and how often vulnerabilities are being exploited in the wild and comparing that with attributes of each vulnerability. I’ve been involved…
We released the Cyentia Cybersecurity Research Library over 3.5 years ago with the goal of curating existing industry knowledge to make it more accessible and useful for the community. I’m very proud of the work our team has done since then to make that goal a reality. Here’s a sampling of those accomplishments: Upon introduction,…
One of the key things we’ve learned researching the vulnerability landscape is that there is a strong relationship between publicly available exploit code and actually seeing an exploit used in the wild. We noticed way back in 2018 that vulnerabilities with published exploit code are as much as 7 times as likely to be exploited…
Earlier this week we held our first Cyentia-branded webinar covering the release of our IRIS 20/20 Xtreme publication and the key findings from that report. We were delighted to have Derek Vadala from Visible Risk join us. There was terrific engagement from the audience. If you missed out, have no fear! We have now posted…
Three years ago – can’t believe it’s been that long – we released the Cyentia Library. Our goal was (and still is) to curate cybersecurity industry reports to make them more accessible and useful for the community. Academic sources provide many great tools for conducting literature reviews, but finding research on the practitioner side is…
Last week I participated in a webinar with Advisen and a panel of industry experts on estimating costs from breaches more accurately. Our focus was our recent IRIS 20/20 publication and the key findings from that report. Hundreds of attendees join the all too brief discussion and we didn’t have time to address all of…
UPDATE We found a sponsor for this study and research has begun. Thanks to all those who expressed interest in it. Don’t fret if you’d still like to partner with us on future research projects – there will be more opportunities! In mid March, the Cyentia Institute published the 2020 Information Risk Insights Study (IRIS…