Research & Insights

Frameworks, analysis, and guidance across TPRM, supply chain risk, and vendor governance.

green gradient background, "The Future of Application Security Is Already Here." and a read the report button.

All Teams3 Supply Chain Risk Managers16 Procurement Security Professionals10 TPRM Practitioners8 Third-Party Governance Teams7 Vendor Due Diligence Analysts7 Compliance and Regulatory Affairs Teams5 Enterprise Sourcing and Procurement Leaders4

Topics:All3 Software Supply Chain Security27 Incident Management17 Regulatory Frameworks7 Monitoring & Performance2 Supply Chain Mapping2 Foundational Concepts1 Ratings & Risk Tiering1

3 articles in Vendor Due Diligence Analysts · Incident Management · Clear filtersSort byNewest·Trending

SaaS App Key Breach Checklist: 12 Controls to Audit

Incident Management

Latest

5 min read

SaaS App Key Breach Checklist: 12 Controls to Audit

When BigCommerce confirmed that compromised credentials for third-party Ribon applications had been used to inject malicious scripts into merchant stores on September 17, it highlighted a critical vul

For Vendor Due Diligence AnalystsRead article

Hardcoded Keys Are Safe in Private Repos: 5 API Security Myths That Brevo's Breach Just Disproved

Incident Management

5 min read

Hardcoded Keys Are Safe in Private Repos: 5 API Security Myths That Brevo's Breach Just Disproved

You ve secured your source repositories. Your API keys live in private repos, not public ones. Your CDN handles the edge logic. You re covered, right? That s what Brevo thought before attackers used a

For Vendor Due Diligence AnalystsRead

14 Million Records, Nine Days to Close: Verizon's Vendor Breach

Incident Management

5 min read

14 Million Records, Nine Days to Close: Verizon's Vendor Breach

The Challenge On June 8, 2017, UpGuard s Cyber Risk Team discovered a publicly accessible Amazon Web Services S3 bucket containing Verizon customer data, names, addresses, account details, and account

For Vendor Due Diligence AnalystsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Research &amp; Insights

SaaS App Key Breach Checklist: 12 Controls to Audit

Hardcoded Keys Are Safe in Private Repos: 5 API Security Myths That Brevo's Breach Just Disproved

14 Million Records, Nine Days to Close: Verizon's Vendor Breach

Stay Ahead of Threats

Research & Insights