The Cybersecurity of the S&P 500: An in-depth analysis from SecurityScorecard

The SecurityScorecard 2024 S&P 500 Cyber Threat Report finds that 21% of S&P 500 companies were breached in 2023, with many incidents occurring via third-party vendors and supply-chain vectors; it highlights the MOVEit zero-day exploitation (CVE-2023-34362) by a criminal group, emphasizes widespread social engineering risk, and recommends stronger third‑party risk management, employee security awareness, and monitoring for data exposures.