Black Kite Reports
Explore the latest Black Kite research, threat intelligence, and industry reports on third-party cyber risk, ransomware, and supply chain security.
Uber's Third Data Breach: What You Need to Know
Ride-sharing Uber is once again the target of a major data breach marking the third cyber incident they’ve experienced overall. Let’s break down the attack.
May 25, 2023Malaslocker Ransomware: Exploiting Zimbra Servers for Charity and Its Global Impact
MalasLocker ransomware targets thousands of Zimbra Server vulnerabilities – and ransom demands are ‘approved charitable donations’. Dive into our analysis.
May 25, 2023The Ultimate Guide to Building a Third-party Risk Program
How to build a third-party risk program from scratch: a step-by-step guide from Black Kite Research covering scope, framework, vendor tiers, and tooling.
Apr 4, 2023How Do You Breach a Company as Big as Spacex? Explore Lockbit’s Latest Third-party Attack
Lockbit ransomware group claims that they breached a SpaceX contractor, seizing 3,000 drawings certified by SpaceX engineers to hold for ransom.
Mar 30, 2023Clop Ransomware Group Strikes Hundreds of Companies, Raising Concerns for Cascading Breaches
Clop ransomware group targets companies with unpatched vulnerabilities in GoAnywhere MFT servers in their latest mass-ransomware attack across the globe.
Mar 30, 20233cx Supply Chain Attack: the Risks and How to Protect Yourself
Massive supply chain attack ‘Smooth Operator,’ poses unprecedented security risks for businesses and the third-party vendors associated.
Mar 30, 2023How Concerned Should Organizations Be on the Vmware Esxiargs Threats?
ESXiArgs ransomware hit 2,000+ VMware ESXi servers via CVE-2021-21974, France hardest hit at 900+; Black Kite covers patching and vendor risk steps.
Feb 8, 20232023 Third Party Data Breach Report
Download the 2023 Black Kite Third Party Data Breach Report to discover trends, shifts, and lessons learned from 2022.
Jan 31, 2023The World Cup Finals Are Here
World Cup team sponsors are just as susceptible to third party risk - Black Kite Research has the latest
Dec 14, 2022Cuba Ransomware Targets Critical Infrastructure – Warranting Fbi and Cisa Warning
Over the last calendar year, Cuba ransomware groups have targeted key critical infrastructure across the United States and the globe – how can you prepare?
Dec 8, 2022Facebook + Meta Pixel Data Privacy Risk on Vendors
Meta Pixel tracking code exposed 495K+ WakeMed and 3M Advocate Aurora patients; Black Kite finds it on 33 of the top 100 US hospitals' vendor sites.
Nov 22, 2022Impact of Microsoft Exchange Proxynotshell Vulnerabilities on the Supply Chain
Zero-day vulnerabilities called ProxyNotShell on MS Exchange Servers were recently discovered, presenting a strong cascading risk to other companies in the vend...
Sep 30, 2022