The State of Trust Report by Vanta, which surveyed IT and business leaders in the U.S., U.K., and Australia in July 2025, ...

Third-party risk often sits near procurement, legal or security operations. It talks about onboarding, assessments, contract clauses, renewals and incidents. It runs on events. A new supplier. A ...

The Mixpanel incident highlights how trusted third-party tools can quietly expand the attack surface long after initial vendor approval.

Static assessments create blind spots that can last for months. Vendors often self-report their security posture with limited ...

Managing external partners has become a critical part of doing business today. As companies expand and rely more on outsourcing, the risks tied to outside vendors grow larger. Businesses can face ...

On Wednesday, Slack users worldwide started noticing error messages and service disruptions. With the workplace communication tool out of commission, team members had ...

SpyCloud, the leader in identity threat protection, today announced the launch of its Supply Chain Threat Protection solution, an advanced layer of defense that expands identity threat protection ...

In Part 4 of our series on the Maryland Online Data Privacy Act (MODPA), we turn to third-party vendors. MODPA sets strict requirements for data processing agreements ...

A new study from KLAS has found third-party accountable care organization vendors are outperforming electronic medical records vendors when it comes to meeting the needs of physician-led ACOs. As part ...