Research & Insights

Frameworks, analysis, and guidance across TPRM, supply chain risk, and vendor governance.

green gradient background, "The Future of Application Security Is Already Here." and a read the report button.

All Teams2 Supply Chain Risk Managers16 Procurement Security Professionals10 TPRM Practitioners8 Third-Party Governance Teams7 Vendor Due Diligence Analysts7 Compliance and Regulatory Affairs Teams5 Enterprise Sourcing and Procurement Leaders4

Topics:All2 Software Supply Chain Security27 Incident Management17 Regulatory Frameworks7 Monitoring & Performance2 Supply Chain Mapping2 Foundational Concepts1 Ratings & Risk Tiering1

2 articles in Vendor Due Diligence Analysts · Software Supply Chain Security · Clear filtersSort byNewest·Trending

CRA Reporting in 15 Months: What a 95-Item Extortion Taught Me

Software Supply Chain Security

Latest

4 min read

CRA Reporting in 15 Months: What a 95-Item Extortion Taught Me

The Challenge Imagine receiving a GPG-signed vulnerability report listing 95 issues in your open source project. It follows proper disclosure protocol, arrives at the designated security addresses, an

For Vendor Due Diligence AnalystsRead article

Can My Build Pipeline Be Hijacked? Rust Attack FAQ

Software Supply Chain Security

5 min read

Can My Build Pipeline Be Hijacked? Rust Attack FAQ

Last week, a question arose in a financial services TPRM Slack channel: How do I assess risk when the vendor is the developer toolchain? This came shortly after the Rust Security Response Team disclos

For Vendor Due Diligence AnalystsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Research &amp; Insights

CRA Reporting in 15 Months: What a 95-Item Extortion Taught Me

Can My Build Pipeline Be Hijacked? Rust Attack FAQ

Stay Ahead of Threats

Research & Insights