Vulnerability Exploitation Overtakes Stolen Credentials As The #1 Breach Vector

Verizon’s 2026 DBIR Covers 22,000 Confirmed Breaches Across 145 Countries For years, the answer to “how did they get in?” was the same: a stolen password. That answer changed in 2025. Verizon’s 2026 Data Breach Investigations Report, the 19th annual edition and the largest dataset the report has ever produced, finds vulnerability exploitation has overtaken … Read more

Black Kite’s 2026 Supply Chain Vulnerability Report Delivers A Precision Framework For An Imprecise World

Every year the count grows. In 2025, researchers published more than 48,000 Common Vulnerabilities and Exposures, an 18 percent jump from 2024. The instinct is to treat that as 48,000 problems. But supply chain vulnerability management is about determining which issues matter most. Black Kite’s 2026 Supply Chain Vulnerability Report arrives with a different conclusion. … Read more

TrustCloud Says AI Can Fix What Questionnaires Never Could – TPRM

The End of Era Most third-party risk programs focus on tracking activity instead of improving safety. Vendors fill out questionnaires, and teams submit reports, but the real risks often remain. TrustCloud created a new version of TrustLens to break this pattern by using ongoing, evidence-based data that stands up to review. This announcement comes at … Read more

Black Kite: Over 70% of Major Retailers Show Exposed Credentials in 2026

A company’s computer system is like a building with many locked doors. Credentials, such as keys and passwords, allow access. When these credentials are compromised, criminals can get in easily and cause problems quickly. This risk is now common in wholesale, retail, and their vendors. Black Kite’s 2026 Wholesale & Retail Report links this danger … Read more

See No Evil: CISOs Still Struggle To Spot Third-Party Risk Across Expanding Supply Chains

Security leaders today face a ‘see no evil’ problem. They cannot protect what they cannot see. Panorays calls third-party cyber risk and defense a “critical challenge” for 2026. Their new CISO survey reveals a big gap between incidents and awareness. While 60% of CISOs have seen more third-party security incidents, only 15% say they have … Read more

×