Cyberstats

Security Intelligence

VendorsBlack Kite

Black Kite

Cybersecurity reports and statistics published by Black Kite

8 categories2 reports

Research Reports

Reports and publications from Black Kite

2025 Manufacturing Report: Why Your Supply Chain is Your Biggest Cyber Risk

2025 State of Financial Services: Hidden Dangers in the Vendor Ecosystem

Recent Statistics & Reports

Manufacturing remains ransomware's number one target. It has held the number one position for the fourth year in a row.

Manufacturing Ransomware

Among companies with less than $20 million, manufacturing is the second targeted industry at 17%.

Manufacturing Ransomware

75% of manufacturing companies have critical vulnerabilities with a CVSS score of 8 or higher.

Manufacturing Ransomware Vulnerabilities

There has been a 9% increase in ransomware attacks on manufacturing companies compared to the previous year.

Manufacturing Ransomware

For companies earning between $100 million and $300 million, manufacturing accounts for 30% of ransomware victims.

Manufacturing Ransomware

Among companies earning over $1 billion, manufacturing makes up a staggering 38.9% of ransomware victims.

Manufacturing Ransomware

65% of manufacturing companies have at least one vulnerability listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog.

Manufacturing Ransomware Vulnerabilities

90 third-party vendors are flagged with high-risk threat categories. Among these, 35 vendors are marked with Known Exploited Vulnerabilities (KEV) tags.

Financial Third-party vendors Vulnerabilities

There were 191 disclosed ransomware victims in the financial sector in 2023.

Financial Ransomware

Nearly one-third (26.6%) of finance threat actors are attributed to "Other", which includes emerging or short-lived groups, highlighting a more fragmented and unpredictable ransomware landscape.

Financial Ransomware

65% of third-party vendors are not maintaining current patch levels, which exposes financial institutions to inherited risk from known vulnerabilities (CVEs) and potentially unpatched zero-day vulnerabilities in legacy technologies.

Financial Third-party vendors Vulnerabilities

Cl0p claimed responsibility for targeting companies using unpatched versions of Cleo's MFT products in December 2024.

As of mid-2025, only 55 ransomware victims have been disclosed in the financial sector.

Financial Ransomware

There were 156 disclosed ransomware victims in the financial sector in 2024.

Financial Ransomware

Black Kite researchers found that 31 out of 140 third-party vendors have at least one critical vulnerability with a CVSS at or above 8. 15 vendors show an extremely high risk with CVSS scores above 9.

Financial Third-party vendors Vulnerabilities

Top Categories

8

7

Vulnerabilities

5

Third-party vendors

3

2

1

Related Vendors

Rubrik Zero Labs