Black Kite Blog
Primary research, Focus Friday vulnerability roundups, and third-party cyber risk analysis from the Black Kite Research Group, updated weekly.
- BlogThe 2026 DBIR Is a Verdict on Traditional Third-Party Risk Programs
- BlogWhen AI Runs Your Vendor Risk Loop, Human Judgment Becomes the Differentiator
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities in Samba, Roundcube, Langflow, Axios, ActiveMQ, Apache Solr, Apache Airflow, Plesk, and Synology Chat Server
- BlogHalf of All Breaches Now Involve a Third Party. The 2026 DBIR Makes the Case You Can't Ignore.
- BlogThe AI Vulnerability Race Is Accelerating, and It’s Highlighting a Concentration Risk Problem
- Focus FridayFOCUS FRIDAY: TPRM Insights on Critical Vulnerabilities In Langflow, FreeBSD, and Memcached
- BlogThe Vulnerability Deluge: 5 Questions Your Board Will Ask About Mythos and Other Frontier Models
- BlogMythos Is Hardening Enterprise Security. It's Also Softening Your Supply Chain.
- Focus FridayFocus Friday: TPRM Insights On Critical Vulnerabilities In Exchange Server, nginx-poolslip, OpenClaw, Flowise, PostgreSQL, Mongodb, PgAdmin, FreePBX, and n8n
- Focus FridayFocus Friday: TPRM Insights on Critical Dead.Letter (Exim), Microsoft SharePoint, and MSSQL Vulnerabilities
- BlogWhat CCPA Means for Your TPCRM Program
- BlogThe Canvas Breach Was More Than an EdTech Problem. It Was a Concentration Risk Problem.
