Frameworks, analysis, and guidance across TPRM, supply chain risk, and vendor governance.
Incident ManagementWhen American Medical Collection Agency (AMCA) failed in its security controls, Labcorp faced a $2.3 million settlement and court-mandated security reforms after 10.2 million customer records were exp
Incident ManagementYour logistics team just confirmed a carrier for tomorrow s pickup. The account matched your approved list, the email domain looked right, and the phone number was in your system. However, criminals r
Incident ManagementA data deletion clause is only effective if you enforce it. Trezor s breach shows the consequences of failing to do so: ShipMonk retained customer data for three years after confirming deletion, incre
Software Supply Chain SecurityWhen a critical vulnerability affects a software supply chain tool, your first instinct might be to patch. However, if the exploit window was already open, patching alone won t secure your environment
Get weekly security insights and compliance updates delivered to your inbox.
Software Supply Chain SecurityAustralian Federal Police arrested two men in Western Australia, aged 21 and 23, suspected of running TeamPCP, a cybercrime operation that compromised at least 3,800 GitHub repositories and launched a
Software Supply Chain SecurityIn September, over 180 NPM packages were compromised by the Shai-Hulud worm, which exfiltrated secrets to 207 public GitHub repositories before most teams even realized they were affected. The attack
Software Supply Chain SecurityYou write flask =2.0 in requirements.txt. Today pip installs Flask 3.1.0 and everything works. Tomorrow an attacker publishes a compromised 3.1.1. Your next build silently downloads malware because it
