Cyber Risk Graph

Connects Everything

Links all relevant cybersecurity information into a uniform, easy to query risk model by connecting with disparate data sources within and outside your organization.

Standardized Cybersecurity Ontology

Provides a common framework and language for all cybersecurity data, creating a medium where any system or process may be integrated and enabled for risk analysis and management.

Effective, Informed Actions

Develops and applies the knowledge necessary for informed cybersecurity decisions; while identifying and enabling the most effective and efficient actions that improve security posture.

Complete Visibility, Constant Communication

Promotes transparency by providing risk visibility into every connected technology, program, process and tool; and by effectively engaging and communicating with all stakeholders.

Future Proof

Evolves with your technology infrastructure and InfoSec programs and mandates; to represent and address the unique cybersecurity needs of your organization.

Brinqa @brinqa 132d

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity.

Brinqa @brinqa 132d

Analysis of Rockwell Automation's PLC platform has uncovered 2 serious vulnerabilities that give attackers a way to modify automation processes & potentially disrupt industrial operations, cause physical damage to factories, or take malicious actions.

Brinqa @brinqa 132d

The Spring development team today acknowledged the newly reported SpringShell, also called Spring4Shell, vulnerability, releasing new versions of the Spring Framework and Spring Boot to fix the root cause of the issue in the popular Java frameworks.

Brinqa @brinqa 134d

Google has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that’s being actively exploited in the wild.

Brinqa @brinqa 134d

VMware Horizon servers — which many organizations are using to enable secure anywhere, anytime access to enterprise apps for remote workers — continue to be a popular target for attackers looking to exploit the critical Apache Log4j vulnerability.

Brinqa @brinqa 136d

Twice as many zero-day software vulnerabilities were exploited last year before vendors even had the chance to patch them than in 2020, and more than half of the most impactful vulnerabilities started with a zero-day exploit, a new study shows.

Brinqa @brinqa 136d

The flaw, tracked as CVE-2022-1040, is specifically an authentication-bypass vulnerability in the User Portal and Webadmin of the Sophos Firewall.

Brinqa @brinqa 139d

Two separate campaigns from different threat actors targeted users with the same exploit kit for more than a month before the company fixed an RCE flaw found in February.

Brinqa @brinqa 140d

Which cybersecurity vulnerabilities and risks are front of mind for you in 2022? Read on to learn more about what to expect and look out for as you develop and refine your cybersecurity strategy for the year.

Brinqa @brinqa 154d

The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug.

Brinqa @brinqa 162d

The flaws are in the ubiquitous open-source PJSIP multimedia communication library, used by the Asterisk PBX toolkit that’s found in a massive number of VoIP implementations.

Brinqa @brinqa 132d

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity.

Brinqa @brinqa 132d

Brinqa @brinqa 134d

Google has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that’s being actively exploited in the wild.

Brinqa @brinqa 134d

Brinqa @brinqa 136d

The flaw, tracked as CVE-2022-1040, is specifically an authentication-bypass vulnerability in the User Portal and Webadmin of the Sophos Firewall.

Brinqa @brinqa 139d

Two separate campaigns from different threat actors targeted users with the same exploit kit for more than a month before the company fixed an RCE flaw found in February.

Brinqa @brinqa 140d

Brinqa @brinqa 154d

The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug.

Brinqa @brinqa 162d

The flaws are in the ubiquitous open-source PJSIP multimedia communication library, used by the Asterisk PBX toolkit that’s found in a massive number of VoIP implementations.

Cyber Risk Graph

The Cyber Risk Graph is a real-time representation of an organization’s infrastructure and apps, delineation of interconnects between assets and to business services, and the knowledge source for organizational cyber risk.