Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility

A new report from Black Kite warns that over 48,000 vulnerabilities were published in 2025, with hackers exploiting them before patches even become available—a negative seven-day window according to Mandiant's data. While this creates an impossible patching challenge, the report found that only 58 of these vulnerabilities pose genuine, discoverable threats to enterprise supply chains, highlighting that organizations need better visibility to focus on truly critical risks. The problem is expected to worsen as AI discovers more vulnerabilities and introduces new weaknesses through rapid coding and autonomous agents that operate hidden within corporate infrastructure.