Black Kite Blog
Primary research, Focus Friday vulnerability roundups, and third-party cyber risk analysis from the Black Kite Research Group, updated weekly.
Latest from the Blog
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Progress WS_FTP, WordPress Core, MySQL, pgAdmin, and MLflow
- BlogTPRM Community Summit 2026 Recap: What Third-Party Cyber Risk Leaders Are Prioritizing Now
- BlogBuilding Vendor Risk Assessment In-House With AI: What Works and What Doesn’t
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in php2shell, Plex2Shell, PAN-OS, Drupal Core, GitLab, Oracle WebLogic, BeyondTrust Remote Support, Fortinet, and Apache Tomcat
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Progress WS_FTP, WordPress Core, MySQL, pgAdmin, and MLflow
- BlogTPRM Community Summit 2026 Recap: What Third-Party Cyber Risk Leaders Are Prioritizing Now
- BlogBuilding Vendor Risk Assessment In-House With AI: What Works and What Doesn’t
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in php2shell, Plex2Shell, PAN-OS, Drupal Core, GitLab, Oracle WebLogic, BeyondTrust Remote Support, Fortinet, and Apache Tomcat
- BlogPHP2SHELL: Two Critical Remote Code Execution Vulnerabilities in the PHP Core
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Citrix NetScaler, ONLYOFFICE Docs, MSSQL, Exchange Server, SharePoint, NGINX UI, MariaDB, and ProFTPD
- BlogAnother Critical NetScaler Flaw, and Why You Can’t Patch Your Way Out of the Vulnerability Deluge
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Citrix NetScaler, SonicWall SMA1000, Exchange Server, Cisco NX-OS, Atlassian, Langflow, and Elastic
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Kiteworks, Citrix NetScaler, MikroTik RouterOS, OpenSSL, and WordPress Core
- Blog2,300 Mythos Vulnerabilities Disclosed. 421 Patched. That Gap Is in Your Supply Chain.
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in ScreenConnect, Exim, Citrix NetScaler, Apache Tomcat, and Langflow
- BlogSupply Chain Incident Response Starts Before the Incident
