third-party risk
NYDFS Part 500 in 2026: What Covered Firms Must Show
NYDFS Part 500 now requires MFA, an asset inventory and a yearly notice by April 15. Here is what covered firms must show and where outside data helps.
Read Article →Tag · 83 Articles
third-party risk. Tagged Articles.
Articles
Page 1 of 9
third-party risk
Vendor Risk Assessment From the Outside In
A vendor risk assessment should not stop at a questionnaire. Here is how to add outside-in evidence, tier vendors and keep the review current.
Read Article →
third-party risk
The Phishing Came From Your Real Domain: What a Marketing Platform Breach Does to Brand Trust
Phishing hit 347,000 subscribers from a brand's genuine address after a marketing platform breach. Sender authentication passed, because nothing was faked.
Read Article →
third-party risk
One Vendor, Eleven Crises: Why Your TPRM Program Has a People Data Blind Spot
People data vendors such as HR assessment platforms hold sensitive executive profiles yet sit outside most TPRM programs. See the gaps and the fix.
Read Article →
third-party risk
Merger, Acquisition, Forgotten Domain: How M&A Activity Quietly Expands Your Attack Surface
Discover how M&A activity expands your attack surface through forgotten domains, abandoned subdomains, legacy systems, and unmanaged cloud assets.
Read Article →
third-party risk
From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways
Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.
Read Article →
third-party risk
EASM Best Practices for the Energy Sector
Learn how energy organizations can strengthen cybersecurity with EASM best practices against APTs, ransomware, and AI-powered threats.
Read Article →
third-party risk
Innovative Solutions to EASM Challenges for 2026
Discover 2026 EASM challenges and innovations shaping cyber defense against APTs, AI threats, and supply chain attacks.
Read Article →
third-party risk
Caught in a Phishing Storm: Here’s How to Regain Control
Learn how real-time phishing protection works: domain monitoring, early detection and automated takedown of fake sites that imitate your brand.
Read Article →
third-party risk
Beyond WHOIS: Offshore Domains in Modern Cybercrime and Ransomware Ecosystems
How offshore and anonymous domain services support phishing, ransomware and crypto theft, with analysis of providers, infrastructure patterns and trends.
Read Article →Brandefense