Topic starter
25/10/2026 11:05 am
TL;DR: Third-party vendors and supply chains became more sophisticated attack paths, while incidents such as the Cleo File Transfer ransomware attack showed how one supplier flaw can cascade into breaches and disruption, according to Black Kite's review of the 2024 cyber threat landscape. Supply-chain governance now has to treat supplier access, monitoring, and regulatory pressure as operational controls, not procurement afterthoughts.
Editorial analysis by NHI Mgmt Group, based on content published by Black Kite: “Lessons Learned from the 2024 Cyber Threat Landscape”.
Key questions
Q: What breaks when third-party access is not reviewed continuously?
A: The break is that access stays active long after the business relationship, vendor task, or application purpose has changed.
Q: Why do supplier vulnerabilities create such large blast radii?
A: Because many organisations inherit the same external dependency at once.
Q: What are the signs that third-party risk management is not working well enough?
A: A weak program usually shows up as duplicate manual reviews, slow follow-up on vendor issues, and mismatches between questionnaire answers and external risk signals.
Practitioner guidance
- Tighten third-party access scope Limit external accounts, integrations, and support channels to the minimum access needed for the exact service relationship.
- Build a supplier offboarding path Ensure every vendor credential, token, API connection, and support permission can be revoked quickly when the relationship changes.
- Monitor shared supplier dependencies Track which business services depend on the same third-party platforms so one compromise cannot surprise multiple teams.
Bottom line: Third-party vendors and shared supply chain services now act as high-leverage attack paths, so governance has to cover access, revocation, and monitoring as well as contracts.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →