Aerialist71·Oct 31Third-Party Risk Management FrameworkI Built a Third-Party Risk Management Framework with 65 Security Controls and Automated Reporting Using Python
Tyson Martin·Oct 15The vendor contract that can change your sale priceSomewhere in your company is a contract nobody has read in years. In a sale, it can matter more than almost anything on your technology…
Farheen Rahman·Oct 2Engineered Silence: How AI Protects Institutions and Abandons the PeopleWhen I graduated from Boston University in 2020, I believed AI had the potential to be a force for good. That belief was inspired by…
Michael-Alex Ojomoh·Sep 22One Critical Vendor, Three High Findings: My TPRM AssessmentA TPRM Case Study: How I reviewed a critical card tokenization vendor for a simulated fintech company
Vendor Vision·Sep 22Third- and Fourth-Party Cyber Risk: How Far Does Your Vendor Visibility Really Go?Why questionnaires alone don’t provide assurance — and why fourth-party dependencies deserve greater attention.
Xpert4Cyber·Sep 7Trezor’s Wallets Were Never Hacked. Here’s Why 80,000+ Customers Got Exposed AnywayTrezor’s Wallets Were Never Hacked. Here’s Why 80,000+ Customers Got Exposed Anyway.
Amit Spitzer·Sep 7Fourteen Courts Got Breached by a Copy of Their Own Data They Never Knew ExistedAlabama’s appellate courts found out their case records had been breached the same way most victims of a vendor incident do: from a notice…
Travis Ray Caverhill·Sep 1Hackers Have Found Healthcare’s Choke Points. Hospitals May Be Defending the Wrong Things.Imagine trying to cripple American healthcare without attacking a single hospital. You do not encrypt an emergency department. You do not…
Travis Ray Caverhill·Aug 27The Cyberattack Never Touched Your Hospital. Your Patients Still Felt It.A hospital does not have to be hacked for a cyberattack to interfere with patient care. Sometimes the attacker never scans the hospital…
Relayshieldadmin·Aug 17Your Wallet Provider Had a Vendor, and That Vendor Had a DashboardI got a security notice from Kraken this week. Not about Kraken.