Walkthrough BreachRisk™ Policyholder Details

Find deeper analysis and trends for specific policyholders in the Cyber Pre-Claim Intervention module

Pre-Claim Intervention
Prevent the breach & the claim

BreachRisk™ for Insurance

Reifi Limited
Home
The Questionnaire Validator
Write better, faster
Pre-Claim Intervention
Prevent the breach & the claim
Portfolio Analyzer
Policyholder Details
Search by Threat & Tech

Interactive Guide: Getting Started

Show Advanced Insights

Logout

JF
Jacob F. Davis
jfd@jfoster.co

BreachRisk™ for Insurance
v.1.0.3

Low
Moderate
High
Low
Moderate
High
Likelihood of a Breach
Impact of a Breach

BreachRisk™ Score

4.6

Medium Risk

Here are the results from Bristol-Myers Squibb's BreachRisk™ assessment that completed on:

Where are the risks of a breach for Bristol-Myers Squibb?

Perimeter

Medium Risk

Exposure

Low Risk

Cloud

Unknown

Social

Low Risk

What are the threats that could lead to a breach?

Low
Moderate
High
Low
Moderate
High
Likelihood of a Breach
Impact of a Breach

Threats By Risk Level

High Risk
0
Medium Risk
4
Low Risk
10

Threats By Type

Vulnerability
5
Misconfiguration
0
Credential
9
Status
Danger Rating
Risk Level
Threat Type
Name
Threat Location
Verified
(7)

4.6/10

Medium Risk
Credential
SSH Brute Force Authentication
54.198.185.138

4.6/10

Medium Risk
Credential
SSH Brute Force Authentication
3.229.19.204

4.6/10

Medium Risk
Credential
SSH Brute Force Authentication
165.89.235.65

4.3/10

Medium Risk
Credential
Microsoft Authentication Password Spraying
https://login.microsoftonline.com

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://test.salesforce.com/

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://sso.bms.com/auth/XUI/

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://remailer-ext.bms.com/RemailerAccount/Login
Verfied False
(7)

0/10

Low Risk
Vulnerability
Cisco VPN Unauthenticated Credential Exposure Vulnerability Exploitation (CVE-2020-3452)
https://198.155.203.130/+cscoe+/message.html?mc=2

0/10

Low Risk
Vulnerability
Cisco VPN Unauthenticated Credential Exposure Vulnerability Exploitation (CVE-2020-3452)
https://fraieconde2.bms.com/+cscoe+/logon.html#form_title_text

0/10

Low Risk
Vulnerability
OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Exploitation
49.12.103.225:22

0/10

Low Risk
Vulnerability
Cisco VPN Unauthenticated Credential Exposure Vulnerability Exploitation (CVE-2020-3452)
https://sgeieconsg2.bms.com/+cscoe+/logon.html#form_title_text

0/10

Low Risk
Credential
SSH Brute Force Authentication
49.12.103.225

0/10

Low Risk
Credential
SSH Brute Force Authentication
165.89.235.96

0/10

Low Risk
Vulnerability
Cisco VPN Unauthenticated Credential Exposure Vulnerability Exploitation (CVE-2020-3452)
https://phlieconus8.bms.com/+cscoe+/logon.html#form_title_text
14 results
How do hackers compare this policyholder to others?
BreachRisk™ Score
4.6
5.7
%
Higher than BreachRisk™ average
Breach Impact
3.5
25
%
Higher than BreachRisk™ average
Breach Likelihood
2
16.7
%
Better than BreachRisk™ average
Threats Detected
7
76.7
%
Better than BreachRisk™ average
Public IPs
264,475
7,419.9
%
Higher than BreachRisk™ average
Exposed Services
333
92.2
%
Lower than BreachRisk™ average
Dark Web References
1,933
799.1
%
Higher than BreachRisk™ average
Discoverable Emails
32,440
2,770.8
%
Higher than BreachRisk™ average
BreachRisk™ Score Transparency

What factors contributed to this entity's overall BreachRisk™ Score?
Note: BreachRisk™ Score is calculated based on a 60-90 rolling average of the most dangerous threats shown.

Aggravating Factors

Attack pathways an attacker could actually use aggravate the BreachRisk™ Score.

Danger Rating
Likelihood
Impact
Risk Level
Threat Type
Name
Status

4.6/10

2/5

3.5/5

Medium Risk
Credential
SSH Brute Force Authentication
Verified

4.6/10

2/5

3.5/5

Medium Risk
Credential
SSH Brute Force Authentication
Verified

4.6/10

2/5

3.5/5

Medium Risk
Credential
SSH Brute Force Authentication
Verified

4.3/10

2.5/5

2.8/5

Medium Risk
Credential
Microsoft Authentication Password Spraying
Verified

3.2/10

2/5

2.3/5

Low Risk
Credential
Web Authentication Password Spraying
Verified

3.2/10

2/5

2.3/5

Low Risk
Credential
Web Authentication Password Spraying
Verified

3.2/10

2/5

2.3/5

Low Risk
Credential
Web Authentication Password Spraying
Verified
7 results
Positive Factors

Positive factors observed with this entity could improve the BreachRisk™ Score.

Magnitude
Positive Factors
Highly Positive
No exploitable vulnerability threats observed.
Highly Positive
No exploitable misconfiguration threats observed.
Highly Positive
No new exposed credentials observed on the dark web.
Highly Positive
Few high-risk services observed to be exposed to the public Internet
Highly Positive
Exposed SSH server not affected by remote code execution vulnerability CVE-2024-6387
Moderately Positive
Trusted-host or key-based authentication enforced for one or more exposed ssh service (2 observations)
Moderately Positive
VPN verified to be secure from several credential exposure vulnerabilities (4 observations)
Risk Management Recommendations

How could this policyholder reduce the threat of a breach?

Magnitude
Recommendation
Associated Threats
Would Moderately Reduce Threat
Enforce key-based authentication for the exposed SSH service and disable credential-based authentication. In addition, or if this is not feasible, restrict access to this service to white-listed IP addresses.
3
Would Moderately Reduce Threat
Enforce complex password requirements and multi-factor authentication whenever possible. Monitor incorrect login attempts for indications of brute force or password spraying attacks.
1
Would Moderately Reduce Threat
Enforce complex password requirements and multi-factor authentication on exposed web applications that allow authentication whenever possible. Monitor incorrect login attempts for indications of brute force or password spraying attacks.
3
3 results