Ecosystem Security Blog

On Thursday, December 9, a zero-day vulnerability CVE-2021-44228 (a.k.a. Log4Shell, LogJam, and Log4j) was made public. This vulnerability impacts Apache Log4j versions 2.0-beta9 to...

Cyber Monday and the holiday shopping season are around the corner: don’t be the victim of an online shopping scam or cyber security breach. Cyber Monday is here, and the holiday...

Neglecting to address third-party vulnerabilities can cause widespread problems for your organization, the third party, and possibly every one of the third party’s customers, which is why...

As more enterprise clients adopt Cyberpion as their External Attack Surface Management solution, we are seeing a distinct, bimodal pattern with regard to the workflows and processes used to...

Customer trust is one of the greatest assets an enterprise can have. However, a rising trend in cyberattacks combined with lax oversight of a critical attack vector may put your...

Physical vs Software vs Digital Supply Chain Vulnerabilities The concept of a supply chain has been around since the 1920s. Fast-forward to today, the term "supply chain" has been co-opted...

We are happy to announce that Cyberpion’s Ecosystem Security™ platform has achieved IP Co-Sell Ready Status and is now available via the Microsoft Azure Marketplace. Access Cyberpion...

A few months ago, Cyberpion approached EA with an ethical disclosure of several security vulnerabilities. EA was informed of the following during that disclosure: that via a trusted...

What Is An Ecosystem? While there has been no shortage of headlines regarding cybersecurity events for the past many years, the recent SolarWinds incident highlights the risks inherent in...

In many recent conversations with family, friends, colleagues and even people in the socially distanced line at the grocery store, I keep talking about online ecosystems as an emerging (and...

Third-Party Attacks Will Increasingly Push Government Agencies To Rigorously Evaluate Online Vendors The recent SolarWinds supply chain attack that targeted several U.S. government...

It took stealing the crown jewels of one of the leading cyber security companies – the offensive hacking tools of FireEye – for anyone to detect what’s shaping up to be...

On top of a challenging economic year, retailers, e-tailers, and their customers face a growing threat this holiday season: the rise in cyberattacks. While businesses have lived with this...

Cloudification has been taking over IT in the past decade and has been a huge factor in the explosion of the size of companies’ online ecosystems and the types of risks that exist...

Several months ago, I was introduced to Cyberpion and the concept of the external attack surface that exists in an organization’s online ecosystem. I have worked in cybersecurity for...

We are about one week away from the U.S. election and a lot is at stake for both parties. While the political pundits are focused on polling numbers and predictions, at Cyberpion we are...

The Days of Monolithic Webservers are Long Gone Practically any public webpage now loads multiple pieces of content, from multiple sources. In fact it’s now not uncommon to find...

Why Cyberpion? Why Now? My team and I founded Cyberpion with one goal in mind: to answer the critical and growing need for organizations to secure their online ecosystems. The primary...