THIRD PARTY
THREAT HUNTING™

Knowledge Network · Oct 20, 2025

"I hate when I'm right," or "It's called Concentration Risk"

Those were the words I used out loud today when I saw all the outages coming as a result of the AWS outages. "I hate when I'm right." I've been talking about it in my classes and using this specific case (an AWS outage...

The reasons for the outage at AWS are almost besides the point because the affect on the rest of its customers, as their third-party, and their customers (as their fourth-parties and on) is immense.

Concentation Risk - it will now be a thing to discuss a bit more in coming days.

From Third Party Threat Hunting™ (TPTH™)

Put it to work

Which of your vendors are critical?

The free eight-step vendor checklist: sort your vendors into systemically critical, critical or ordinary.

Get the checklist →

Have us run it

Managed third-party threat hunting: practitioners on your systemically critical vendors, automation on the rest.

See the managed tiers →

Thirty minutes to find out where your program actually stands.

Book a 30-min call