Risk Management October 31, 2022

How to Effectively Manage Third-Party Supply Chain Risks

3 min read - Third-party risks are widespread in the supply chain and can cause substantial damage. Loss of revenue and sensitive information, operational downtime, legal complications, compliance issues and damaged reputations can all arise from a single breach. If your company lacks a…

Government August 29, 2022

How Cybersecurity Policy Has Changed Since the SolarWinds Attack

3 min read - Major cyberattacks since 2019 jolted the U.S. government and software industry into action. The succeeding years have seen executive orders, new funding, two summits and a newfound resolve. Because of those attacks, the federal government aims to fix the open-source…

News August 17, 2022

64% of Security Leaders Can’t Stop a Supply Chain-Related Attack

2 min read - Over the past two years, businesses have focused on changing how they work. However, these pandemic changes required a high level of IT support and resources. This often causes deficits in other areas, such as the strength to stop a…

Risk Management July 28, 2022

NIST Supply Chain Security Guidelines: 10 Key Takeaways

3 min read - The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) recently published updated guidance for reducing cybersecurity risks in supply chains. Titled “Software Supply Chain Security Guidance,” the update is NIST’s response to directives issued by an executive…

Risk Management May 12, 2022

62% of Surveyed Organizations Hit By Supply Chain Attacks in 2021

4 min read - You’ve heard more about the supply chain in the past two years than you ever expected, or likely wanted. But, as a cybersecurity professional, you now have even more reason to pay attention besides not being able to get your…

Intelligence & Analytics March 21, 2022

Supply-Side Hackonomics: Supply Chain Attacks and Data Security

3 min read - Most people now know far more about supply chains than they ever wanted to. Still, anyone could forgive you for not knowing the term ‘supply chain hack’. Often, when the media reports these types of attacks, they name them and…

Zero Trust February 23, 2022

Ransomware Resilience Tops Findings in X-Force Threat Intelligence Index 2022

7 min read - For the third year in a row, ransomware was the top attack type globally in 2021, despite some successes last year by law enforcement to take down ransomware groups. This was among the top findings of IBM Security’s latest research…

Incident Response December 27, 2021

2021 Manufacturing and Supply Chain Security Roundup

4 min read - In 2020, ransomware actors demanded $17 million from a laptop maker and $34 million from a Taiwanese electronics contract company. The past two years have also delivered major disruptions for supply chains. The pandemic pushed supply chain attack issues front-and-center, with disruptions up…

Software Vulnerabilities November 9, 2021

A New Cybersecurity Executive Order Puts the Heat on Critical Infrastructure Suppliers

3 min read - Ransomware. Five years ago, the cybersecurity community knew that term well, although among others it was far from dinner table conversation. Times have changed. Since early 2020, ransomware has hit a slew of headlines. People inside and outside of the…

Incident Response November 4, 2021

Maritime Cybersecurity: A Rising Tide Lifts all Boats

3 min read - Ports and ships — the maritime industry — are vital points in the global supply chain for food, medicine, consumer goods, fuel and many other products. Most of the world’s globally traded goods travel by sea. That’s why maritime security…