US automakers have upended the software development lifecycle, following a rule issued by the Us Department Of Commerce Bureau of Industry. Banning code written in China or by Chinese-owned firms from Vehicles that connect to the cloud on the grounds…
Fridays incident will take time to unfold. The U.S has had its fair share of supply chain incidents this year with United Health, the Baltimore ship incident and now Crowdstrike. Veritas GRC #cybersecurity #supplychainsecurity View Original Post
This is an outstanding well sourced report, and should be read by any firm focused on cybersecurity and supply chain risk management. Back in 2019 the U.S Airforce commissioned the RAND Corporation for their assistance in understanding the significance of…
One of those supply chain cyber threats. In this case as it relate to the ownCloud service. An open source file sharing and sync tool. The ACSC rates this vulnerability as critical, as it allows the compromise of a third…
Those pesky nation state threat actors are just getting better at what they do. Identifying and exploiting vulnerabilities in code written by product and service providers. Supply chain hacks are increasing in frequency, sophistication and severity of impact. In ones…
Is the hack on Norweigen ministries another example of a supply chain vulnerability. As mobile end point software is exposed by hackers Olaf Classen? ‘As Norwegian National Security Authority (NSM) has confirmed that attackers used a zero-day vulnerability in Ivanti’s…
Thank you Hill Dickinson LLP and Peter Thornton MBE. While the port of Nagoya is now up and running. The hack demonstrated the speed at which a cyber attack can affect an organizations operations and supply chains. The effect on…
A great read from Wired. Demonstrating the complexity of cybersecurity and supply chain risk through the SolarWinds hack. How a minor incidental investigation led to the uncovering of a significant supply chain hack, hard coded into SolarWinds and distributed globally.…
One of Europe’s largest, and world leading electric-steel plants, that supplies all of Europe with high-quality reinforcing steel been hacked. With reports that Badische Stahlwerke the German manufacturer of steel has shut down it systems to resolve and incident? ().…
Toyota found in March 2022 that cyber attacks on its supply chain can have a profound impact on production. Attacks on SolarWinds and Kaseya and the knock on impact of the Colonial Pipeline hack are demonstrations of the impact of…
