Podcast
Third Party Threat Hunters
The TPTH podcast. Conversations with CISOs and GRC leaders on vendor exposure, AI risk and what examiners are asking now.
Latest episode
Change Healthcare and the Concentration Risk Nobody Chose, with Kayne McGladrey
Oct 15, 2026 · 24 min
In February 2024, a ransomware attack on Change Healthcare froze roughly 40% of US medical claims and left hospitals and physicians unable to get paid for weeks, even though most were never touched by the attackers. vCISO and author Kayne McGladrey explains why Change is still the best case study for concentration…
Episodes
Recent episodes
The feed carries the most recent run. Everything else is in the full archive on the show page.
| # | Episode | Guest | Date | |
|---|---|---|---|---|
| Change Healthcare and the Concentration Risk Nobody Chose, | Kayne McGladrey | Oct 15, 2026 | Listen → | |
| Third-Party AI Risk, Explained | Shankar Krishnan | Oct 13, 2026 | Listen → | |
| Shadow AI Supply Chain Risk | Ken Huang | Oct 6, 2026 | Listen → | |
| AI That Actually Helps TPRM | Brian Shaw | Sep 30, 2026 | Listen → | |
| S2 E11 | Continuous Third-Party Risk Monitoring | Girish Redekar | Sep 29, 2026 | Listen → |
| Beyond SOC 2: Real Vendor Risk | Nivathan of SecureOS | Sep 24, 2026 | Listen → | |
| S2 E10 | The Vendor Trust Gap | Bill Haber | Sep 22, 2026 | Listen → |
| S2 E9 | Sanctions Ready Third-Party Risk | Michael Volkov | Sep 15, 2026 | Listen → |
| Treat Vendors As Part Of The Enterprise | Julie Giaischi | Sep 10, 2026 | Listen → | |
| S2 E8 | Vendor Risk Beyond The SOC Report | Becky Newton | Sep 8, 2026 | Listen → |
Threat Hunters Trophy
A field guide with every episode
What the guest said, turned into a self-check, a handful of moves and one thing to do this month. Free to read, no email needed.
Kayne McGladrey
The Single Point of Failure Field Guide
Why Change Healthcare is still the best case study for concentration risk, and how to find the single points of failure in your own vendor stack before AI dependency repeats it. From our conversation with vCISO and author Kayne McGladrey.
Read the field guide →Optional
Get each new field guide when it comes out
New guides are announced in Fourth Party, our weekly email. Leave your address and confirm the link we send. Company and role are optional; they help us make the guides more useful.
We send a confirmation link first; nothing else arrives until you click it. One-click unsubscribe on every issue. Company, role and call requests go only to Gregory's inbox. How we handle your details.
Subscribe
Listen wherever you already listen
Be a guest
We interview practitioners running third-party and AI risk programs — not vendors pitching products.
Pitch an episode →Want to sponsor the podcast or an episode?
Show-level and single-episode sponsorship are both available. The contract covers the show alone: sponsorship buys no influence over an assessment, a shortlist or a report, and no say in who we book or what we ask them.
Talk about sponsorship →Fourth Party · weekly
One outtake, one AI-risk framework update, one thing to do this week.
We send a confirmation link first — you are not subscribed until you click it. One-click unsubscribe on every issue. How we handle your address.