Call us now:
Those pesky nation state threat actors are just getting better at what they do. Identifying and exploiting vulnerabilities in code written by product and service providers. Supply chain hacks are increasing in frequency, sophistication and severity of impact. In ones opinion they are one of the most dangerous vectors being used today by threat actors, why?
As a society we are 100% dependent upon digitals. Be that infrastructure, communications, software, hardware, data centers, cloud services, operational security, IOT and OT technology. Infrastructure that relies on code, that’s owned, managed or contracted by end users and invariably effected by complex software supply chains.
The concentration risk of software supply chain hacks makes them a near perfect opportunity for nation state hackers. Who have been very good at their job in modifying source code; targeting unpatched vulnerabilities or exploiting poorly written code or poorly deployed software tools. As demonstrated by Okta, SolarWinds, Equifax, Not Petya and others (https://lnkd.in/emjrc2vS)
Many organizations are not literate in cybersecurity risk management; do not have a clear picture of their infrastructure; do not have the internal capabilities to manage the oversight of vulnerabilities and patch; place key services with MSPs without an understanding of the risks or do not have a clear view of their supply chains.
Software supply chain hacks are a very efficient method used to cause maximum disruption. A further reason why the cyber insurance industry needs to consider consequential losses. Supply chain hacks have far reaching impact across logical and physical supply chains – this months attack against DP world may have been due to an exploit of Citrix vulnerability.
Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix
#cybersecurity #cyberriskmanagement #supplychainsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7135537156948668416