Security News > 2021 > July > How to ensure your vendors are cybersecure to protect you from supply chain attacks

One expert offers ways to remove the bullseye from supply vendors.
In his Help Net Security article, How can a business ensure the security of their supply chain?, Reed specifically focused on Merrit's concern about making sure supply-chain vendors are putting forth the effort to meet security standards.
Ask suppliers how they prioritize risk: If the company performs risk assessments, its suppliers should as well.
An understanding of how the supplier manages those risks.
Evidence regarding how the supplier is mitigating those risks.
Reed is well aware there are no guarantees, especially when dealing with supply chains.
News URL
Related news
- PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack (source)
- IPany VPN breached in supply-chain attack to push custom malware (source)
- Supply chain attack hits Chrome extensions, could expose millions (source)
- Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant' (source)
- North Korea targets crypto developers via NPM supply chain attack (source)
- Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers (source)
- China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access (source)