Third-Party Risk Management Vendor Risk Management Software: How to Choose a Platform in 2027
Most shortlists for vendor risk management software start with a feature grid and end with five vendors who tick every box. The…
Panorays’ Blog
Third-Party Cyber Risk Management Blog
Learn about the latest research and happenings in third-party cyber risk management.
Third-Party Risk Management 
Breaches, Vulnerabilities & Incident Response WordPress Vulnerability CVE-2026-119977: What It Means for Your Vendors’ Websites
On 3 November 2026, CISA added a WordPress vulnerability, CVE-2026-119977, to its Known Exploited Vulnerabilities catalog and gave federal agencies until 6…
8 min read
Third-Party Risk Management AI Vendor Risk Assessment: What to Ask Before You Approve an AI Vendor
On 29 October 2026, developers who used the Cursor editor received what looked like a routine update to Anthropic’s official Claude Code…
8 min read
Breaches, Vulnerabilities & Incident Response The vendor was fine. The channel wasn’t. A third-party risk view of the Claude Code incident
The vendor was fine. The channel wasn’t. Nobody broke into Anthropic. Nobody broke into the companies whose developers were affected. And for…
13 min read
Breaches, Vulnerabilities & Incident Response Anthropic – Claude Code – Cursor – Panorays Threat Intelligence Report – Oct 2026
See which of your suppliers are linked to Cursor. See your supplier exposure Threat intel reportPanorays Threat Center · October 30, 2026…
7 min read
Press Releases Panorays Brings Its External Asset Discovery to Tenable Vulnerability Management
Vulnerability management teams using Tenable can now draw on the external assets Panorays discovers, so newly exposed domains and IP addresses can…
3 min read
Breaches, Vulnerabilities & Incident Response PHP2Shell Threat Intel Report: PHP Remote Code Execution Flaws (CVE-2026-109618 & CVE-2026-109619)
Updated October 27, 2026. This report was refreshed with the latest Threat Center data. The October 24 and October 23 versions are…
32 min read
Third-Party Risk Management Financial Cyber Risk Quantification: How to Measure Cyber Risk in Financial Terms
Learn how financial cyber risk quantification translates cyber risk into financial terms.
9 min read
Breaches, Vulnerabilities & Incident Response PHP2Shell: What the Internet’s Third Parties Look Like Today
Of the companies with internet-facing assets running an identifiable PHP version, 97% are using a version vulnerable to PHP2Shell. Two-thirds have at…
11 min read
Breaches, Vulnerabilities & Incident Response Data Breaches Continue to Hit Japan. Is Your Company Safe?
If you work in security, IT, or risk in Japan, someone in leadership has probably asked you a version of the same…
8 min read
Uncategorized NIST AI Standards: A Guide to AI Risk Management and Governance
Artificial intelligence is advancing rapidly, and managing its unique risks requires a structured, repeatable strategy. When cybersecurity and risk leaders discuss “NIST…
16 min read
Third-Party Risk Management What Is Cyber Risk Management? A Guide for Enterprises
Cyber risk management is the continuous operational process of identifying, assessing, prioritizing, treating, and monitoring cybersecurity risks across an enterprise’s systems, data…
25 min read
Breaches, Vulnerabilities & Incident Response The French Supermarket Cyberattack: Third-Party Risk in the Freezer Aisle
Hackers turned refrigeration systems into a source of disruption across French supermarkets, exposing a blind spot in how businesses assess the cyber…
7 min read
Breaches, Vulnerabilities & Incident Response Common Vulnerabilities and Exposures (CVE): A Complete Guide
Your organization runs on a complex web of technology that spans everything from on-premises software to cloud platforms to the open-source components…
22 min read
AI Risk & Governance Shadow AI Is Creating Vendors You Never Onboarded
Most shadow AI programs look inward. That covers the surface you control. It does nothing about the support agent at your vendor…
5 min read
So do we click?
See how Panorays takes control of third-party cyber risk from onboarding to remediation.