Black Kite Blog
Major Third-party Data Breaches Revealed in January 2021
Data breaches in 2020 proved to be just as costly as they were high profile.
Feb 3, 20215 Lessons Learned From the Largest Third-party Breaches in 2020
Five hard-earned lessons from the largest third-party data breaches of 2020 — what went wrong, what to fix, and how risk teams responded then.
Jan 26, 2021Solarwinds Breach – Gray Rhino or Black Swan?
It’s clear whether an event should be classified as a gray rhino or a black swan. Instances such as the recent attack on SolarWinds however blurs the line.
Jan 19, 2021Cyber Risk Ratings Leader Normshield Rebrands to “black Kite”
Black Kite, the cyber risk ratings company formerly known as NormShield, today revealed its new name, logo, and headquarters.
Jan 11, 2021Major Third-party Data Breaches Revealed in December 2020
We count down the top 9 data breaches caused by third parties in December 2020.
Jan 9, 2021What Was “not Surprising” About the Recent Government-targeted Attacks
What wasn't surprising about recent government-targeted attacks: prolonged internal email traffic monitoring revealed how deep the compromises ran.
Dec 16, 2020A Tale of Two Threats
A tale of two threats: how data analytics and Open FAIR™ quantification reframe what 'high risk' actually means in modern third-party cyber risk programs.
Dec 10, 2020Patched Your Network Recently? the Growing Risk on It Vendors
COVID-19 created a massive surge in hacking activities especially for IT vendors. We breaks down the most critical vulnerabilities to patch.
Nov 17, 2020Major Third-party Data Breaches Revealed in October 2020 – Part 2
October 2020 third-party data breach roundup, Part 2: Innova Health, Kylie Cosmetics, and the City of Odessa all hit through third-party compromise. See the dat...
Nov 10, 2020Major Third-party Data Breaches Revealed in October 2020 – Part 1
October 2020 third-party data breach roundup — Part 1: the largest supply chain compromises of the month and what each reveals about vendor exposure.
Nov 4, 2020Major Third-party Data Breaches Revealed in June 2020
We regularly update the list of major third-party (aka supply-chain) attacks and breaches revealed in June 2020.
Oct 30, 2020What a Good Vendor Risk Management Program Looks Like in 2020
The purpose of a risk management program is to thoroughly evaluate each vendor’s impact on all aspects of a company, and mitigate negative impacts.
Oct 26, 2020