Security news aggregator

Latest coverage for Vendor

Vendor security covers risks introduced by suppliers, including software flaws, exposed systems, and weak access to customer data.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Vendor is an external organization that supplies an IT product or service, such as software, hardware, cloud hosting, or managed security. In security reporting, the term usually concerns a third party whose technology, personnel, or connectivity forms part of an organization’s environment or handles its data.

Vendor risk depends on the access and dependency involved. A compromised or poorly secured vendor can expose customer information, introduce vulnerabilities through software updates or components, or provide attackers with a route into connected systems. Practical controls include risk-based due diligence, contractual security and notification requirements, least-privilege access, vulnerability and software-supply-chain review, monitoring, and prompt removal of access when a relationship ends. Assessments should also address privacy obligations and how the vendor will support investigation and recovery if a security incident occurs.

Showing 3 most recent headlines Filtered view
Bank Info Security 2 years, 4 months ago

Why Wiz Wants to Buy Cloud Startup Gem Security for $350M

Wiz May Not Need More Cash for Its 2nd Deal in 4 Months Since It Has $900M on HandWiz is reportedly set to buy centralized cloud threat management vendor Gem Security for $350 million, Bloomberg reported this week. The deal would come just four months after Wiz made its first-ever acquisition, scooping up cloud-based development platform Raftt for as much as $50 million.

Bank Info Security 16 Mar 2024, 11:00 a.m. Acquisition Cloud Startup Vendor
Bank Info Security 2 years, 4 months ago

Why Wiz Is Pursuing Its 2nd Massive Funding Round in 2 Years

Cloud Security Vendor Wiz Eyes Unprecedented $800M Funding Round at $10B+ ValuationThe New York-based cloud security phenom is speaking with several investors include Thrive, Lightspeed Venture Partners, G Squared, Sequoia and Cyberstarts in hopes of raising roughly $800 million at a valuation of more than $10 billion. The cash infusion would help Wiz finance future acquisitions.

Bank Info Security 12 Mar 2024, 12:00 p.m. Cloud Finance Vendor