Black Kite Blog
Focus Friday: TPRM Insights on Critical Vulnerabilities in Citrix Netscaler, Vmware Vcenter, Zimbra, Oracle Weblogic, and Roundcube
TPRM analysis of critical CVEs in Citrix NetScaler, VMware vCenter, Zimbra, Oracle WebLogic, and Roundcube. See which vendors are exposed and how to prioritize ...
Aug 21, 2026Ransomware Groups Are Vibe-coding Their Way Past Old Defenses
Ransomware crews now vibe-code encryptors, skip paid recon tools, and let AI triage stealer logs. Here’s what’s actually changed in the attack chain.
Aug 19, 2026Offense Got Faster at Black Hat 2026. Defense Has to Get Connected.
Black Hat 2026 talked about AI. DEF CON broke 20-year-old protocols. Why collective resilience, not individual speed, is the answer to third-party cyber risk.
Aug 17, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Rockwell Plcs, Metabase, Cisco Asa & Ftd, Cisco Imc, Cisco Ios Xe, Adobe Coldfusion, Sharepoint, Exchange Server, Clamav, Pgadmin, Django, and Jenkins
TPRM analysis of critical CVEs in Rockwell PLCs, Metabase, Cisco ASA & FTD, Cisco IMC, Cisco IOS XE, Adobe ColdFusion, SharePoint, Exchange Server, ClamAV, pgAd...
Aug 14, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Teamcity, Cisco Fmc, Solarwinds Web Help Desk, N-central, Langflow, Apache Tomcat, and Gitea
TPRM analysis of critical CVEs in TeamCity, Cisco FMC, SolarWinds Web Help Desk, N-central, Langflow, Apache Tomcat, and Gitea. See which vendors are exposed an...
Aug 7, 2026Three Years of Ransomware Susceptibility Index Data Say Your Questionnaire Is Guessing
See three years of Ransomware Susceptibility Index data behind Black Kite's 2026 Ransomware Report, and why it outperforms self-graded vendor questionnaires.
Aug 3, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in WordPress, Nginx, Solarwinds Serv-u, Oracle Weblogic, Zimbra, Exim, Rabbitmq, Langflow, Gitea, Sharepoint
TPRM analysis of critical CVEs in WordPress, NGINX, SolarWinds Serv-U, Oracle WebLogic, Zimbra, Exim, RabbitMQ, Langflow, Gitea, SharePoint. See which vendors a...
Jul 24, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Progress Sharefile Szc, Sonicwall Sma1000, Mssql, Exchange Server, Zimbra, Roundcube, Freebsd, and Sharepoint
TPRM analysis of critical CVEs in Progress ShareFile SZC, SonicWall SMA1000, MSSQL, Exchange Server, Zimbra, Roundcube, FreeBSD, and SharePoint.
Jul 17, 2026Sharefile's Silent Zero-day: Inside Progress's Emergency Storage Zone Controller Shutdown
TPCRM analysis of the unpatched path traversal in Progress ShareFile Storage Zone Controller. See exposure scope and how to prioritize remediation.
Jul 16, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Joomshaper Sp Page Builder, Langflow, and Apache Activemq
TPRM analysis of critical CVEs in JoomShaper SP Page Builder, Langflow, and Apache ActiveMQ. See which vendors are exposed and how to prioritize remediation.
Jul 10, 2026Focus Friday: TPRM Insights on Critical Vulnerabilities in Sharepoint, Proftpd, Cacti, and Gogs
TPRM analysis of critical CVEs in SharePoint, ProFTPD, Cacti, and Gogs. See which vendors are exposed and how to prioritize remediation.
Jul 2, 2026Dora's First Year of Data Is In. Third Parties Are Still the Weak Link.
DORA's grace period is over. The ESAs' first major incident report is out — and third-party ICT risk is driving the gaps. Here's what your program needs now.
Jul 1, 2026