SecurityScorecard Snags Driftnet to Level Up Threat Intelligence
Recorded: May 14, 2026, 10:01 p.m.
| Original | Summarized |
SecurityScorecard Snags Driftnet to Level Up Threat Intelligence TechTarget and Informa Tech’s Digital Business Combine.TechTarget and InformaTechTarget and Informa Tech’s Digital Business Combine.Together, we power an unparalleled network of 220+ online properties covering 10,000+ granular topics, serving an audience of 50+ million professionals with original, objective content from trusted sources. We help you gain critical insights and make more informed decisions across your business priorities.Dark Reading Resource LibraryBlack Hat NewsOmdia CybersecurityAdvertiseNewsletter Sign-UpNewsletter Sign-UpCybersecurity TopicsRelated TopicsApplication SecurityCybersecurity CareersCloud SecurityCyber RiskCyberattacks & Data BreachesCybersecurity AnalyticsCybersecurity OperationsData PrivacyEndpoint SecurityICS/OT SecurityIdentity & Access Mgmt SecurityInsider ThreatsIoTMobile SecurityPerimeterPhysical SecurityRemote WorkforceThreat IntelligenceVulnerabilities & ThreatsRecent in Cybersecurity TopicsApplication SecurityAttackers Weaponize RubyGems for Data Dead DropsAttackers Weaponize RubyGems for Data Dead DropsbyAlexander CulafiMay 13, 20264 Min ReadСloud SecurityLatAm Vibe Hackers Generate Custom Hacking Tools on the FlyLatAm Vibe Hackers Generate Custom Hacking Tools on the FlybyAlexander CulafiMay 13, 20265 Min ReadWorld Related TopicsDR GlobalMiddle East & AfricaAsia PacificLatin AmericaSee AllThe EdgeDR TechnologyEventsRelated TopicsUpcoming EventsPodcastsWebinarsSEE ALLResourcesRelated TopicsResource LibraryNewslettersPodcastsReportsVideosWebinarsWhite Papers Partner PerspectivesDark Reading Resource LibraryCyber RiskNews, news analysis, and commentary on the latest trends in cybersecurity technology.SecurityScorecard Snags Driftnet to Level Up Threat IntelligenceThe new acquisition looks to boost visibility into third-party ecosystems that are becoming a bigger concern as vectors for supply-chain attacks.Arielle Waldman,Features Writer,Dark ReadingMay 14, 20262 Min ReadSecurityScorecard acquired Driftnet, LTD., adding another layer of threat intelligence to its third-party risk management (TPRM) platform. Driftnet is a U.K.-based internet scanning and search engine startup that aims to provide organizations with real time threat intelligence. Users can search by domain, IP address, or organization to uncover any open ports, potential vulnerabilities, misconfigurations, or attack campaigns that may pose a risk to their network. Vendor risk management has emerged as a key area in cyber defenses, especially since the pivot to remote work during the COVID pandemic. SecurityScorecard’s own research has found almost one-third of breaches are third party-related, and that number is probably both underreported and growing. SecurityScorecard warned that organizations increasing use of automated tools and agentic artificial intelligence (AI) further complicates third-party risk that can turn into threats, and more concerningly breaches. As risks emerge faster than organizations can handle, security posture audits must evolve to keep pace with advanced attackers and a complex supply chain.Related:Emerging Chiplet Designs Spark Fresh Cybersecurity ChallengesWhile automated tools and AI can help to boost productivity and efficiency, third parties may be deploying them "across supplier and partner environments with weak access controls, exposed credentials, and no visibility," according to a SecurityScorecard press release. "The threat landscape has fundamentally changed," Dr. Aleksandr Yampolskiy, SecurityScorecard CEO and co-founder said in a press release on the acquisition. "AI agentic automation and connected supply chain tools have exploded across enterprise environments — and most TPRM programs have no visibility into the risk AI poses for their vendors." Proactive Breach DetectionWith the acquisition, SecurityScorecard aims to put threat hunters, security operations center teams, and TPRM practitioners on the same page when it comes to discovering and mitigating third-party risks. That could enable a more "proactive breach detection," noted the press release. SecurityScorecard continues to build up its TPRM platform and respond with automation as supply chain risks vastly expand. In March, the company launched TITAN AI to automate vendor risk workflows. Last year, the company bought HyperComply which puts an automated spin on the tedious task of filling out security questionnaires and responses. The Driftnet acquisition could round out SecurityScorecard's offerings with more in-depth threat intelligence that's required nowadays. Organizations struggle with network visibility and an overwhelming number of assets as third-party infrastructure and environment are more interwoven than ever. Understanding third-party risk is not only essential to mitigate threats, but to adhere to compliance regulations as well.Related:TransUnion's Real Networks Deal Focuses on Robocall BlockingFinancial terms of the Driftnet transaction were not disclosed. SecurityScorecard’s announcement also noted that it will maintain Driftnet’s existing collaborations with computer emergency response teams (CERTs) in the U.S., EU, and UK as well as partnerships with several universities which have produced academic works on global internet health.About the AuthorArielle WaldmanFeatures Writer, Dark ReadingArielle spent the last decade working as a reporter, transitioning from human interest stories to covering all things cybersecurity related in 2020. Now, as a features writer for Dark Reading, she delves into the security problems enterprises face daily, hoping to provide context and actionable steps. She looks for stories that go past the initial news to understand where the industry is going. Her coverage areas include identity and access management, cyber risk and operations, industrial control systems, operational technology, and ransomware trends. She previously lived in Florida where she wrote for the Tampa Bay Times before returning to Boston where her cybersecurity career took off at SearchSecurity. When she's not writing about cybersecurity, she pursues personal projects that include a mystery novel and poetry collection. See more from Arielle WaldmanWant more Dark Reading stories in your Google search results?Add Us NowMore InsightsIndustry ReportsHow Enterprises Are Developing Secure ApplicationsInside RSAC 2026: security leaders reveal the risks redefining your defense strategyHow Enterprises Are Harnessing Emerging Technologies in CybersecurityDitch the Data Center: Understanding Flexible Cloud Infrastructure Security Management2025 State of MalwareAccess More ResearchWebinarsYour Guide to Securing AI Adoption in Your OrganizationWhat is the Right Role for Identity Threat Detection and Response (ITDR) in Your Organization?The New Attack Surface: How Attackers Are Exploiting OAuth to Own Your Cloud WorkspacePrompt Injection Is Just the Start: Securing LLMs in AI SystemsAnatomy of a Data Breach: What to Do if it Happens to YouMore WebinarsLatest Articles in DR TechnologyVulnerabilities & ThreatsWhy Security Leadership Makes or Breaks a Pen TestMay 5, 2026|5 Min ReadIdentity & Access Management SecurityOracle Red Bull Racing Team Revs Up Automation to Boost SecurityApr 30, 2026|5 Min ReadVulnerabilities & ThreatsBad Memories Still Haunt AI AgentsApr 23, 2026|5 Min ReadEndpoint SecurityTwo-Factor Authentication Breaks Free From the DesktopApr 16, 2026|5 Min ReadRead More DR TechnologyDiscover MoreBlack HatOmdiaWorking With UsAbout UsAdvertiseReprintsJoin UsNewsletter Sign-UpFollow UsCopyright © 2026 TechTarget, Inc. d/b/a Informa TechTarget. This website is owned and operated by Informa TechTarget, part of a global network that informs, influences and connects the world’s technology buyers and sellers. All copyright resides with them. Informa PLC’s registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. TechTarget, Inc.’s registered office is 275 Grove St. Newton, MA 02466.Home|Cookie Policy|Privacy|Terms of UseYour Privacy Choices |
SecurityScorecard has acquired Driftnet, LTD., integrating additional threat intelligence capabilities into its third-party risk management (TPRM) platform. Driftnet functions as a U.K.-based internet scanning and search engine startup designed to provide organizations with real-time threat intelligence by allowing users to search for open ports, potential vulnerabilities, misconfigurations, or ongoing attack campaigns associated with specific domains, IP addresses, or organizations. This synergy is driven by the growing recognition that vendor risk management is a critical component of modern cybersecurity defenses, especially in environments where remote work has necessitated increased reliance on external partners. SecurityScorecard's internal research indicates that nearly one-third of security breaches stem from third-party related issues, a figure that is noted to be underreported and continually expanding. The company has warned that the increasing use of automated tools and agentic artificial intelligence (AI) further complicates third-party risk, potentially turning vendor relationships into significant threats. As risks emerge faster than organizations can manage them, the evolution of security posture audits is essential to keep pace with advanced adversaries and the complexity of the modern supply chain. The press release regarding the acquisition highlighted that AI agentic automation and connected supply chain tools have permeated enterprise environments, yet most TPRM programs lack adequate visibility into the specific risks posed by these AI-integrated vendors. The objective of combining these entities is to facilitate more proactive breach detection by aligning threat hunters, security operations center teams, and TPRM practitioners regarding third-party risks. To address the challenges of network visibility and the deeply interwoven nature of third-party infrastructure, the combined platform aims to provide necessary threat intelligence that is essential not only for mitigation but also for compliance adherence. SecurityScorecard is actively developing its TPRM platform through automation efforts, having previously launched TITAN AI to automate vendor risk workflows and acquired HyperComply to automate the process of filling out security questionnaires and responses. The integration of Driftnet’s deep scanning capabilities is intended to round out SecurityScorecard’s offerings with the in-depth threat intelligence required in the current landscape. |