@cerberusit.bsky.socialA third-party partner graciously leaked civil records for 8.8 million Danes from the CPR registry. Just another Tuesday in IT where external trust spectacularly backfires. #vendorrisk #sameoldstory
@bhconsulting.bsky.socialCyber risk doesn’t stop at your organisation’s boundaries.
For #CybersecurityAwarenessMonth, BH Consulting’s Noel Barbour looks at lessons from recent supply-chain incidents and asks: how secure is your supply chain?
Part 1: bhconsulting.ie/supply-chain...
@thedailytechfeed.comEY breach exposed Goldman Sachs & Man Group client data via EY’s tax platform vulnerability. #SecurityNews #DataBreach #EY #GoldmanSachs #ManGroup #Cybersecurity #VendorRisk #Privacy https://thedailytechfeed.com/ey-breach-exposes-client-data-from-goldman-sachs-man-group/
@mjetechnologies.comA contractor's missed security patch at a third-party vendor let hackers breach the FBI and expose employee data — and cost that contractor their job. Patch management isn't IT trivia; it's business risk. #MJE #Cybersecurity #PatchManagement #VendorRisk #DataBreach
@loans51.bsky.socialIn this article, I explain how middle-market businesses can strengthen procurement resilience by identifying critical suppliers responsible for more than 25% of operational throughput. nyack.top/et9
#VendorRisk #SupplyChainResilience #ProcurementStrategy #WorkingCapital #OperationalSovereignty
@hugovalters.bsky.socialMost procurement checks skip one thing: a vendor's CVE history. Use the ValtersIT CVE API in Python to score critical count, unpatched ratio, CISA KEV exposure, and patch https://www.valtersit.com/guides/api/valtersit-vendor-security-due-diligence-cve-history-api/
#vendorrisk #thirdpartyrisk #cve
@hendryadrian.bsky.socialVendor concentration risk often hides in plain sight: many suppliers can rely on the same provider. A 4-step mapping, stronger SLAs, data portability, and backup identity paths reduce single points of failure. #VendorRisk #SupplyChain #RiskManagement
@mjetechnologies.comAn OpenAI AI agent breached Australia's Medicare portal — and the vendor waited 3 months to disclose it. As businesses lean on AI agents and AI vendors, governance and vendor accountability matter as much as the tech itself. #MJE #AIGovernance #Cybersecurity #VendorRisk
@cyberlifecoach.bsky.socialYour vendor passed the audit. Their AI provider didn't.
That’s the fourth party problem: your data may flow through AI providers you never assessed.
I break down why annual vendor reviews are no longer enough and what to ask AI vendors now.
@loans51.bsky.socialSmall and mid-sized enterprises (SMBs) can protect their operations and cash flow by implementing a vendor risk matrix. Relying on single-source suppliers exposes companies...
Read the full article: nyack.top/ab5
#SupplyChainResilience #VendorRisk #WorkingCapital #SMB #ProcurementStrategy
@richardfreiberg.bsky.socialThe US has experienced multiple attacks on #critcalinfrastructure, the most recent being our water supply. Local governments MUST know who has remote access, how it's secured, who monitors suspicious activity & how fast vendors respond to an incident. #Vendorrisk is part of #operationalresilience.