Security events provide a centralized feed of external breaches, zero-day exploits, and emerging threats that may impact your organization and your supply chain.
Security incidents often surface first in fragmented sources like news coverage, breach reports, and hacker forums. By the time teams manually connect those signals to vendors, products, or vulnerabilities, they can lose valuable response time.
By mapping fragmented signals, such as hacker forums and news reports, directly to your existing vendors, findings data, or your own organization, the platform lets you quickly assess potential impact and decide whether further investigation is needed.
Navigating the feed
The Security events feed helps teams quickly scan for new developments and focus on events that may require attention. You'll find it under My Network > Events (events affecting your vendors) and under My Company > My Events (events affecting your own organization). The following image shows an example of the My Network feed.
Each event can include one or more sources. Information extracted from these sources is mapped to existing SecurityScorecard data using signals such as:
- Company names mapped to vendors or your own organization
- CVEs mapped to findings
- Products mapped to organizations or product detections
Event tags
Every event carries tags that distinguish confirmed incidents from unverified chatter, regardless of whether you're viewing it from My Network or My Company:
- If a breach is confirmed, you'll see a Compromise tag with a Breach subtype.
- If a breach is alleged but not yet confirmed, you'll see a Threat tag with an Alleged breach subtype.
- If the signal is unconfirmed chatter with no specific breach claim (for example, forum discussion referencing a company without a named incident), you'll see a Threat tag with a Hacker chatter subtype.
What happens next depends on where the event affects you: see Take action on a security event affecting your vendors for the My Network workflow, or Respond to a security event affecting your company for the My Company workflow.