A report by SecurityScorecard reveals that a majority of the global external attack surface (62%) is concentrated in 15 companies, specifically within the companies’ products and services. This research further discusses how this concentration of cyber risk and an increase in the exploitation of third-party vulnerabilities may pose a threat to national security and the global economy. 

Key findings from the report include: 

• 150 organizations make up 90% of the technology services and products across the global attack surface. 
• In the past year, 41% of those organizations had at least one compromised device. 
• 11% experienced a ransomware incident in the past year. 
• There is a higher likelihood of breach among the top 15 vendors, as these organizations have below-average risk ratings.