Black Kite Blog
Php2shell: Two Critical Remote Code Execution Vulnerabilities in the Php Core
Black Kite's Focus Friday unpacks php2shell (CVE-2026-109618 & CVE-2026-109619) — critical unauthenticated PHP RCE, highest risk on mod_php — and how TPRM teams...
Oct 21, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Citrix Netscaler, Onlyoffice Docs, Mssql, Exchange Server, Sharepoint, Nginx Ui, Mariadb, and Proftpd
Black Kite's Focus Friday covers critical flaws in Citrix NetScaler, ONLYOFFICE, MSSQL, Exchange, SharePoint, NGINX UI, MariaDB, and ProFTPD for TPRM teams.
Oct 16, 2026Another Critical Netscaler Flaw, and Why You Can’t Patch Your Way Out of the Vulnerability Deluge
CVE-2026-107406 is the fifth NetScaler flaw since August. Here’s what that means for your supply chain and why prioritization, not patch volume, is the answer.
Oct 9, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Citrix Netscaler, Sonicwall Sma1000, Exchange Server, Cisco Nx-os, Atlassian, Langflow, and Elastic
Black Kite's Focus Friday covers critical flaws in Citrix NetScaler, SonicWall, Exchange, Cisco NX-OS, Atlassian, Langflow, and Elastic for TPRM teams.
Oct 9, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Kiteworks, Citrix Netscaler, Mikrotik Routeros, Openssl, and WordPress Core
Black Kite's Focus Friday covers critical flaws in Kiteworks, Citrix NetScaler, MikroTik, OpenSSL, and WordPress, and what TPRM teams should do now.
Oct 2, 20262,300 Mythos Vulnerabilities Disclosed. 421 Patched. That Gap Is in Your Supply Chain.
Mythos has disclosed 2,300 vulnerabilities to open-source maintainers. Only 421 are patched. That backlog is third-party cyber risk you don't control.
Sep 25, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Screenconnect, Exim, Citrix Netscaler, Apache Tomcat, and Langflow
TPRM analysis of critical ScreenConnect, Exim, Citrix NetScaler, Apache Tomcat, and Langflow vulnerabilities and how to prioritize vendor remediation.
Sep 25, 2026Supply Chain Incident Response Starts Before the Incident
Supply chain incident response starts too late. Jeffrey Wheatman on making the decisions, automation, and vendor paths ready before a supplier gets hit.
Sep 15, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in N-central, Adobe Commerce & Magento, Mikrotik, Fortinet, Mssql, Sharepoint, Exchange Server, Mongodb, Roundcube, and Jenkins
TPRM analysis of critical N-central, Adobe Commerce & Magento, MikroTik, Fortinet, MSSQL, SharePoint, Exchange Server, MongoDB, Roundcube, and Jenkins. See whic...
Sep 11, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Papercut Mf/ng, Sonicwall Sma1000, Sangoma Switchvox, and Mongodb Bi Connector
TPRM analysis of critical PaperCut MF/NG, SonicWall SMA1000, Sangoma Switchvox, and MongoDB BI Connector. See which vendors are exposed and how to prioritize re...
Sep 4, 2026Black Kite Shortlisted for the Risk Management Awards 2026
Black Kite has been shortlisted for Cyber Security Product of the Year at the Risk Management Awards 2026, recognizing its contribution to the risk management p...
Sep 3, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Trueconf, Openssl, Apache Tomcat, Postgresql, and WordPress Elementor
TPRM analysis of critical TrueConf, OpenSSL, Apache Tomcat, PostgreSQL, and WordPress Elementor. See which vendors are exposed and how to prioritize remediation...
Aug 28, 2026