Darkreading SecurityScorecard Acquires Driftnet for Enhanced Third-Party Risk Management
Article Content
- •SecurityScorecard acquired Driftnet to enhance third-party risk management capabilities.
- •Driftnet's technology identifies vulnerabilities in third-party environments, increasing visibility.
- •Almost one-third of breaches are linked to third-party vendors, highlighting the acquisition's relevance.
On May 14, 2026, SecurityScorecard announced its acquisition of Driftnet, a U.K.-based internet scanning startup, to enhance its threat-informed third-party risk management (TPRM) capabilities. The integration of Driftnet's technology into SecurityScorecard's TITAN AI platform aims to provide real-time intelligence on third-party risks, particularly those associated with AI and automated tools. SecurityScorecard's research indicates that nearly one-third of breaches are linked to third-party vendors, a figure that is likely underreported. The Driftnet engine can identify vulnerabilities and misconfigurations across supplier environments, significantly increasing visibility into potential threats. This acquisition comes as organizations face growing risks from automated tools deployed with weak security controls. The combined capabilities are expected to enable a more proactive approach to breach detection and risk mitigation in complex supply chains.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Continue Reading
Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…