Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-16 00:38:50 EDT

PhotosVideosAllPeople
LatestRanked
@oversightinstitute.orgOct 15, 2026, 3:05 PM

Term of the day: Health Insurance Portability and Accountability Act

HIPAA is a U.S. federal law passed in 1996 that sets standards for protecting sensitive patient...

Full definition: oversightinstitute.org/glossary/health-insurance-portability-and-accountability-act

#TPRM #ThirdPartyRisk

Health Insurance Portability and Accountability Act. HIPAA is a U.S. federal law passed in 1996 that sets standards for protecting sensitive patient health information and also addresses the ability to transfer and continue health insurance coverage. It regulates how certain organizations handle, use, and disclose protected health information (PHI). It applies within the United States and is not a global standard.
@oversightinstitute.orgOct 14, 2026, 3:05 PM

Term of the day: Hardware Supply Chain Risk

Hardware supply chain risk is the possibility that physical technology components, such as devices, chips, and their embedded firmware, could be...

Full definition: oversightinstitute.org/glossary/hardware-supply-chain-risk

#TPRM #ThirdPartyRisk

Hardware Supply Chain Risk. Hardware supply chain risk is the possibility that physical technology components, such as devices, chips, and their embedded firmware, could be compromised, tampered with, counterfeited, or made unavailable at some point between manufacture and delivery. Because hardware passes through many suppliers and manufacturing steps, problems introduced early can be difficult to detect once a product is in use. Managing this risk typically involves assessing suppliers and checking the integrity of firmware and software on devices, though these measures reduce rather than eliminate exposure.
@portendai.bsky.socialOct 14, 2026, 9:33 AM

AI scales observation. Humans retain judgment.

Portend monitors vendor signals across a vast range of sources, spotting changes teams can’t track manually. AI explains what changed; people decide what matters and what to do next.

portend.ai/products/tprm

#ThirdPartyRisk #TPRM

Photo, no description
@oversightinstitute.orgOct 13, 2026, 7:41 PM

Oversight Institute: Intelligence for Third-Party Risk

Here we share terms from our glossary, plus our vendor directory and webinars.

oversightinstitute.org

#TPRM #ThirdPartyRisk

@mjetechnologies.comOct 12, 2026, 12:32 PM

A contractor’s malware incident just exposed 8.7 million customer records — the brand’s own systems were never touched. Why it matters: your vendors carry your risk too, and oversight is now a board-level issue. #MJE #CyberSecurity #ThirdPartyRisk #DataPrivacy #VendorRisk

Photo, no description
@aciesholdings.bsky.socialOct 12, 2026, 10:01 AM

A vendor can be low risk at onboarding - and critical 6 months later.

Services expand.
Dependencies deepen.
Incidents happen.
Risk changes.

That’s why TPRM cannot stop at due diligence.

Onboarding is a point in time. Risk is continuous.

#TPRM #ThirdPartyRisk #RiskManagement #Acies

@mariogalarza.bsky.socialOct 12, 2026, 2:45 AM

8.7M karaoke fans' data exposed in Japan — and the company itself was never breached. Malware hit its contractor, Nippon Columbia. Your vendor is your attack surface. Breakdown + 3 takeaways: https://www.linkedin.com/feed/update/urn:li:share:7515241201642618880/ #cybersecurity #ThirdPartyRisk

@cybercaptain.ccOct 11, 2026, 5:04 PM

A malware attack exposed 8.7M karaoke fan records, no consent, no proper security controls. Check your processor agreements and retention policies today. #GDPR #DataBreach #ThirdPartyRisk

CyberCaptain security infographic
@it4intserver.bsky.socialOct 10, 2026, 2:21 PM

iT4iNT SERVER The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't VDS VPS Cloud #CyberSecurity #AI #IdentityManagement #ThirdPartyRisk #DataProtection

@thedailytechfeed.comOct 9, 2026, 6:03 PM

Canadian suspect arrested in FBI jobs portal breach by ShinyHunters. #ShinyHunters #FBI #DataBreach #Cybersecurity #ThirdPartyRisk #Governance thedailytechfeed.com/fbi-arrests-...

Photo, no description
@potato.softwareOct 8, 2026, 5:27 PM

#securitygovernance #potatosecuritystrategy #potatoinsurance #riskmanagement #thirdpartyrisk #compliance 2/2

@seanconroy.bsky.socialOct 8, 2026, 5:16 PM

#securitygovernance #cybersecuritystrategy #cyberinsurance #riskmanagement #thirdpartyrisk #compliance 2/2

@zwillgen.comOct 7, 2026, 5:29 PM

Delaware’s HB 380 significantly expands the state’s privacy law, introducing broader coverage thresholds and new requirements for third-party due diligence.

#Privacy #DataPrivacy #Delaware #Compliance #ThirdPartyRisk

www.zwillgen.com/privacy/dela...

@hexonbot.bsky.socialOct 6, 2026, 5:30 PM

Denmark's CPR breach shows valid credentials can fuel mass data harvesting. Monitor query volume, baselines, and limits to catch abuse before billing does. https://www.hexon.bot/blog/database-query-monitoring-denmark-cpr-breach #Cybersecurity #DataSecurity #ThirdPartyRisk

@cybercaptain.ccOct 6, 2026, 5:05 PM

Denmark’s CPR breach exposed 8.8M records. Audit third-party access NOW 🔍 #GDPR #DataBreach #ThirdPartyRisk

CyberCaptain security infographic
@j4vv4d.comOct 6, 2026, 8:43 AM

When your trusted third party becomes your biggest security hole. A masterclass in "it seemed like a good idea at the time." #Cybersecurity #DataBreach #Denmark #ThirdPartyRisk

@j4vv4d.comOct 2, 2026, 9:36 PM

Frontline Education notifies districts of data breach via third-party vuln. SSNs exposed. They still won't say which vendor or when attackers got in. Cool cool. #DataBreach #Cybersecurity #SchoolSecurity #ThirdPartyRisk #K12

@diesec.bsky.socialOct 2, 2026, 8:00 AM

GUTcert, a German KRITIS certifier, breached Sep 5-9. 640GB stolen incl. grid substation locations and network plans. ENTEGA confirms downstream impact. Extortion attempts followed.
🇬🇧 diesec.com/2026/10/gutc...
🇩🇪 diesec.com/de/2026/10/g...
#KRITIS #ThirdPartyRisk #CyberSecurity

Photo, no description
@hugovalters.bsky.socialSep 30, 2026, 3:00 AM

Most procurement checks skip one thing: a vendor's CVE history. Use the ValtersIT CVE API in Python to score critical count, unpatched ratio, CISA KEV exposure, and patch https://www.valtersit.com/guides/api/valtersit-vendor-security-due-diligence-cve-history-api/

#vendorrisk #thirdpartyrisk #cve

@psoheil.bsky.socialSep 29, 2026, 4:19 PM

The FBI is investigating claims that the cyber extortion group ShinyHunters breached FBIJobs.gov and stole sensitive info.

#Cybersecurity #DataBreach #FBI #InformationSecurity #CyberAttack #ThreatIntelligence #DataSecurity #ThirdPartyRisk

Read the Reuters article:
www.reuters.com/world/shinyh...

Load more