Black Kite Blog
Could TPRM Have Foreseen the Xz Utils (CVE-2024-3094) Crisis?
The CVE-2024-3094 vulnerability in XZ Utils sent shockwaves through cybersecurity, unraveling a narrative straight out of a cyber thriller.
Apr 1, 2024Focus Friday: TPRM Insights on Critical Postgresql and Pgadmin Vulnerabilities
TPRM analysis of critical PostgreSQL and pgAdmin vulnerabilities. See which vendors are exposed and how to prioritize remediation.
Mar 29, 2024Vendor Outreach Isn’t Always the Answer When a High-profile Security Event Hits Your Cyber Ecosystem
Companies should use vendor outreach as a last resort following a high-profile security event, focusing instead on targeted, strategic communication.
Mar 26, 2024Black Kite’s Fifth Annual Third-party Breach Report Highlights Ripple Effects of Cyber-ecosystem Breaches
Dive into Black Kite’s 5th annual third-party breach report, outlining ripple effects across cyber ecosystems and strategies to mitigate risk.
Mar 21, 2024Focus Friday: a TPRM Deep Dive Into Outlook Rce and Forticlient Ems Vulnerabilities
Spotlight the significant cybersecurity incident at Change Healthcare, a pivotal event that has highlighted the criticality of TPRM in the healthcare.
Mar 15, 2024Is Alphv/blackcat Staging Its Own Death for a Rich Exit?
AlphV/BlackCat are at it again - Read more about the Change Healthcare breach from Black Kite Research.
Mar 5, 2024Focus Friday: TPRM Strategies in the Wake of Change Healthcare Breach
This Focus Friday explores third party risk management strategies following the Change Healthcare breach and lessons for regulated industries.
Mar 1, 2024Nist Csf 2.0 in 10 Questions
Set of guidelines designed to help organizations improve cybersecurity practices and manage cybersecurity risks in a consistent and comprehensive manner.
Feb 28, 2024Focus Friday: Lockbit Shutdown Insights & Screenconnect and Exchange Server Vulnerabilities
Comprehensive look at the cybersecurity landscape, starting with an analysis of the Lockbit ransomware group’s shutdown from a TPRM perspective.
Feb 23, 2024Downfall of a Digital Titan: the Global Sting That Toppled Lockbit
LockBit, notorious for its ransomware rampage, has long been the digital boogeyman for businesses worldwide.
Feb 20, 2024Focus Friday: Enhancing TPRM Vigilance Against Critical Vulnerabilities in Fortios, Symantec, Roundcube, and Qnap Systems
Focus Friday: Learn more about recent cyber breaches and critical vulnerabilities in FortiOS, Symantec, RoundCube, and QNAP from Black Kite.
Feb 16, 2024How to Get Information From Your Vendors on High-profile Security Events with Black Kite’s Focustags™
High-profile security events can be a major pain. Here are the best practices for gaining the right info on these incidents from critical vendors.
Feb 13, 2024