[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLjVZkHorD7c0Ro7r4_BoS6Y9RuKJF26LTOR8aGr6UfI":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"145e44a9-ba70-4a02-b8e9-cb58cc4ea111","How companies could share cyber risks without exposing their secrets","how-companies-could-share-cyber-risks-without-exposing-their-secrets-8ac202","A cryptographic technique could let companies prove they're vulnerable to critical flaws without revealing the sensitive data that attackers could exploit. The post How companies could share cyber risks without exposing their secrets appeared first on CyberScoop.","A cryptographic technique called zero-knowledge proofs could enable companies to prove their vulnerability to cyber threats without disclosing sensitive proprietary data like software inventories or network diagrams. This technology allows for mathematical verification of vulnerability presence without exposing the underlying sensitive information, addressing a long-standing challenge in cybersecurity information sharing.","Zero-knowledge proofs could allow companies to share cyber risk data without revealing sensitive information.","https:\u002F\u002Fcyberscoop.com\u002Fzero-knowledge-proofs-cyber-risk-sharing-op-ed\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F08\u002FGettyImages-1278144537-1.jpg","2026-08-04T10:00:00+00:00","2026-08-04T12:00:08.789122+00:00",7,[17],{"name":18,"type":19},"zero-knowledge proofs","technology","0493c7e9-989a-4692-b4e6-136f5ec09675",{"id":20,"icon":22,"name":23,"slug":24},null,"Cryptography","cryptography",[26,28,33,38],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":46,"vendors":133},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":42,"name":77,"problem":78,"products":79},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"slug":105,"name":106,"problem":107,"products":108},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":148},"zero-knowledge-proofs-could-unlock-safer-cyber-risk-sharing","Zero-Knowledge Proofs Could Unlock Safer Cyber Risk Sharing","Organizations have long struggled to share meaningful threat and vulnerability intelligence because doing so risks exposing sensitive proprietary data such as software inventories, network diagrams, and system configurations. This tension creates information silos that weaken the broader cybersecurity ecosystem, leaving companies and sectors less prepared to respond to shared threats. Zero-knowledge proofs (ZKPs) offer a cryptographic solution that allows one party to mathematically prove a fact — such as the presence of a specific vulnerability — without revealing the underlying sensitive data. This matters because collective defense depends on timely, trustworthy information sharing, and ZKPs could remove the primary barrier that prevents organizations from participating. Failing to share vulnerability data, even when technically feasible, represents a missed opportunity to reduce systemic cyber risk across industries.",[139,140,141,142,143,144,145,146,147],"NIST CSF ID.RA-5 (Vulnerability and Risk Identification)","NIST SP 800-150 (Guide to Cyber Threat Information Sharing)","CIS Control 7 (Continuous Vulnerability Management)","CIS Control 17 (Incident Response and Management)","GDPR Article 25 (Data Protection by Design and Default)","GDPR Article 32 (Security of Processing)","NIS2 Directive Article 23 (Reporting Obligations)","ISO\u002FIEC 27001 A.6.1.3 (Contact with Special Interest Groups)","NIST SP 800-39 (Managing Information Security Risk)",{}]