Third-Party Risk Management stories - Page 2
How managed service providers can help clients with CIRCIA
Tue, 25th Nov 2025
#
supply chain
#
risk & compliance
#
security operations
U.S. MSPs can support critical infrastructure clients in meeting CIRCIA's 2026 cyber incident reporting rules, ensuring faster detection and compliance readiness.
US firms face rising fines as compliance & skills shortfall grow
Fri, 21st Nov 2025
#
data protection
#
advanced persistent threat protection
#
supply chain
Three-quarters of US firms faced fines for data breaches or compliance failures last year, amid rising regulatory demands and a growing skills shortage.
Cybercrime crackdown disrupts malware, exposes AI attack risks
Tue, 18th Nov 2025
#
malware
#
ransomware
#
supply chain
Law enforcement and cybersecurity firms have disrupted major malware networks amid rising risks from AI-driven cyberattacks and escalating supply chain breaches globally.
Manifest & NetRise join forces to secure software supply chains
Fri, 14th Nov 2025
#
data protection
#
supply chain
#
risk & compliance
Manifest and NetRise have partnered to enhance software supply chain security with deep firmware analysis, improving risk monitoring across critical sectors like healthcare.
Ransomware attacks surge 28% in September as Industrials sector hit hardest
Thu, 30th Oct 2025
#
ransomware
#
advanced persistent threat protection
#
supply chain
Global ransomware attacks surged 28% in September, with Industrials hardest hit, as cyber criminals ramp up efforts ahead of the busy holiday season.
Black Kite Bridge surpasses 100,000 shared items in first year
Wed, 1st Oct 2025
#
supply chain
#
risk & compliance
#
cyber risk
Black Kite Bridge has shared over 100,000 cyber risk intelligence items in its first year, boosting supply chain security through rapid, collaborative responses.
Cloud Security Alliance introduces first SaaS security standard
Thu, 25th Sep 2025
#
cloud security
#
iam
#
ai security
The Cloud Security Alliance has launched the SaaS Security Capability Framework, the first industry-wide standard addressing critical security gaps in SaaS applications.
Gregory Webb named Chief Executive Officer at HITRUST
Wed, 24th Sep 2025
#
advanced persistent threat protection
#
risk & compliance
#
ai
Gregory Webb has been appointed CEO of HITRUST, succeeding founder Daniel Nutkis, who will become Executive Chairman, ensuring leadership continuity.
Bitsight reports 40% vendor network growth amid AI integration
Wed, 17th Sep 2025
#
data protection
#
breach prevention
#
risk & compliance
Bitsight's vendor network has grown 40% to 68,000 firms as AI integration cuts onboarding time by 70% and reduces breach risk by 75%.
Cynomi unveils TPRM module to speed up vendor risk processes
Fri, 12th Sep 2025
#
risk & compliance
#
cybersecurity
#
integration
Cynomi unveils a new TPRM module to help service providers manage vendor risks faster and more efficiently within its vCISO platform.
CHROs urged to prioritise cyber security amid AI in HR systems
Thu, 4th Sep 2025
#
digital transformation
#
hcm
#
physical security
Gartner urges CHROs to prioritise cyber security as HR systems increasingly adopt AI, highlighting the risks of data breaches and the need for stronger digital oversight.
Black Kite unveils ASI for targeted third-party cyber risk
Sat, 9th Aug 2025
#
ransomware
#
advanced persistent threat protection
#
supply chain
Black Kite has launched its Adversary Susceptibility Index to help firms spot which suppliers are most exposed to specific cyber threat actors, enhancing risk management.
Ransomware, AI & vendor risks drive billions in 2025 breaches
Wed, 16th Jul 2025
#
ransomware
#
mfa
#
advanced persistent threat protection
Ransomware, AI-powered attacks and vendor risks drive billions in cyber breach costs in 2025, with retail the hardest hit sector globally.
5 mission-critical moves Canadian CIOs can make to navigate uncertainty
Mon, 9th Jun 2025
#
dr
#
digital transformation
#
supply chain
Canadian CIOs must reduce technical debt, harness AI, boost cyber resilience, manage third-party risks, and inspire cultural change to navigate ongoing uncertainty.
BlueVoyant unveils SBOM tool to tackle third-party software risk
Wed, 4th Jun 2025
#
supply chain
#
cybersecurity
#
analyst report
BlueVoyant has launched a Software Bill of Materials tool to help firms manage third-party software risks and improve supply chain cyber defence.
LexisNexis data breach exposes 364,000 personal records
Thu, 29th May 2025
#
data protection
#
data analytics
#
martech
LexisNexis has suffered a data breach exposing personal details of over 364,000 people via a third-party software platform, raising security concerns.
myCOI launches illumend to automate insurance compliance tasks
Mon, 12th May 2025
#
digital transformation
#
physical security
#
risk & compliance
myCOI launches illumend, an AI-powered platform designed to simplify third-party insurance compliance for risk managers and property teams alike.
Black Kite launches tool for third-party vulnerability insight
Fri, 2nd May 2025
#
ransomware
#
supply chain
#
breach prevention
Black Kite launches Vulnerability Intelligence Briefs to help organisations identify and manage third-party cyber risks, enhancing supply chain security.
Kiteworks reveals the top data breaches of 2024 report
Fri, 18th Apr 2025
#
supply chain
#
cybersecurity
#
data security
Kiteworks has revealed its report on the top data breaches of 2024, highlighting the increasing importance of data sensitivity in assessing breach severity.
Strengthening operational risk and third-party management – navigating the new APRA Standards
Mon, 7th Apr 2025
#
risk & compliance
#
cybersecurity
#
cloud services
APRA-regulated entities in Australia must prepare for the upcoming CPS230 deadline, a shift aimed at enhancing operational and third-party risk management.