Vendor Risk Management is critical for reducing the impact of security risks associated with third-party vendors. But often included with this cybersecurity practice is a bloat of administrative processes that disrupt workflows and impact VRM efficacy, defeating the purpose of… Read More "Choosing Automated Vendor Risk Remediation Software"
Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED, revealing in new detail how exactly Flock Safety’s cameras track the movements… Read More "Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works"
Google and Mozilla have released fresh security updates for Chrome and Firefox users, resolving a total of 115 vulnerabilities. The new Chrome 153 release patches 42 security defects, including three critical-severity and 28 high-severity bugs. The critical flaws include CVE-2026-91726,… Read More "Chrome, Firefox Updates Patch 115 Vulnerabilities"
The rapid emergence of AI has radically changed a host of professions, with software engineering and development perhaps the most transformed of all pursuits. The usual “solitary ritual” of a developer writing code for hours is giving way to collaboration… Read More "AI made software development unrecognizable. Is cybersecurity next?"
Security researchers have released details of two zero-day vulnerabilities found in TP-Link security cameras commonly used in home and small offices, one of which could enable attackers to spy on users. OPSWAT said the bugs affect the TP-Link Tapo C200… Read More "Zero-Day Flaw in TP-Link Cameras Enables Covert Eavesdropping"
You understand the importance of a Vendor Risk Management strategy in mitigating the impact of third-party data breaches. However, you’re still unsure about its application to different vendor cyber risk contexts. To help you bridge this application gap and leverage… Read More "Vendor Risk Management Examples (3 Scenarios)"
A critical WSO2 vulnerability patched earlier this year is now being exploited in the wild by threat actors seeking access to sensitive enterprise data. WSO2 is an open source middleware platform that enables organizations to design, secure, integrate, and manage… Read More "Enterprises Warned of Attacks Exploiting WSO2 Vulnerability"
For multinationals, the exposure also runs inward. China’s Data Security Law bars providing data stored in China to foreign law enforcement without approval and compels cooperation with Chinese security authorities. Chinese law can bar a vendor’s China-based staff from supporting… Read More "Hack-back programs could expose your security vendors"
The UK and its allies have warned opponents of the Iranian regime that they may be subject to targeting by a Tehran-backed spyware campaign. An advisory published yesterday by the National Cyber Security Centre (NCSC), the FBI and the Netherlands’… Read More "NCSC and Allies Warn of Iranian Spyware Campaign"
Third-party risk assessments identify, evaluate, and mitigate potential risks that third-party vendors might introduce into business operations. These processes form the foundation for a proactive risk management program, meeting regulatory requirements while safeguarding organizational assets and preventing reputational damage. Cyber… Read More "7-Step Third-Party Risk Assessment Process"
