A third-party breach at a popular software provider in the US education sector has enabled cybercriminals to make off with Social Security numbers and other employee data. Frontline Education provides administration software for thousands of K-12 school districts, enabling teams… Read More "Frontline Education Breach Impacts K-12 School District Staff"
Vendor Offboarding: Best Practices for Ensuring Security
When organizations hear “third-party risk management,” they often consider the processes needed to mitigate risks when working with a third-party vendor. These can include procurement risks and risks associated with starting new vendor relationships, often referred to as “onboarding,”—but what… Read More "Vendor Offboarding: Best Practices for Ensuring Security"
Should the CISO role be split in two?
Some larger enterprises opt to have a deputy CISO as a way to manage the workload. In this case, the CISO is responsible for strategic direction, engaging with the board and other executives, and risk management, while the deputy role… Read More "Should the CISO role be split in two?"
A Complete Guide to Third-Party Risk Management in Healthcare
Modern healthcare heavily relies on third-party vendors for various services such as IT solutions, supply chain logistics, and more. As healthcare organizations increasingly collaborate with external entities as business associates, it creates several dependencies and risks. The risk of third-party… Read More "A Complete Guide to Third-Party Risk Management in Healthcare"
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Ravie LakshmananOct 05, 2026Zero-Day / Vulnerability Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a… Read More "New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline"
Free NIST CSF Vendor Questionnaire Template (PDF Download)
This NIST CSF questionnaire template will help you understand the degree of each vendor’s alignment with the high-level function of the NIST CSF framework – Identity, Protect, Detect, Respond, and Recover. Though this assessment only offers a superficial understanding of… Read More "Free NIST CSF Vendor Questionnaire Template (PDF Download)"
A Guide to Third-Party Risk Management in the Financial Sector
In today’s financial landscape, businesses are interconnected, and outsourcing and partnerships are necessary—meaning managing risks associated with third-party vendors is pivotal. Whether you’re a small community bank or a multinational financial conglomerate, mastering third-party risk management is vital to safeguarding… Read More "A Guide to Third-Party Risk Management in the Financial Sector"
Alleged ShinyHunters Leader Arrested in Jordan
An individual believed to be the leader of the extortion group ShinyHunters was reportedly arrested in Jordan and is cooperating with the FBI. The suspect, Saif al-Din Khader, known as Rey, a teenage cybercriminal from Amman, is helping the FBI… Read More "Alleged ShinyHunters Leader Arrested in Jordan"
How to Perform a Third-Party Risk Assessment: A Step-by-Step Guide
A third-party risk assessment is a key part of a Third-Party Risk Management (TPRM) program. It’s a thorough process for evaluating potential risks that an outside vendor or external party could pose to your organization. Assessments sit in the TPRM… Read More "How to Perform a Third-Party Risk Assessment: A Step-by-Step Guide"
A Vendor Management Policy: What to Include and How to Create One
Last updated September 21, 2026 A vendor management policy sets the rules for intake, review, monitoring, and offboarding, so risk decisions stay consistent regardless of who makes them. It keeps vendor requirements across your portfolio enforceable instead of case-by-case. The… Read More "A Vendor Management Policy: What to Include and How to Create One"