Security news aggregator

Latest coverage for Vendor

Vendor security covers risks introduced by suppliers, including software flaws, exposed systems, and weak access to customer data.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Vendor is an external organization that supplies an IT product or service, such as software, hardware, cloud hosting, or managed security. In security reporting, the term usually concerns a third party whose technology, personnel, or connectivity forms part of an organization’s environment or handles its data.

Vendor risk depends on the access and dependency involved. A compromised or poorly secured vendor can expose customer information, introduce vulnerabilities through software updates or components, or provide attackers with a route into connected systems. Practical controls include risk-based due diligence, contractual security and notification requirements, least-privilege access, vulnerability and software-supply-chain review, monitoring, and prompt removal of access when a relationship ends. Assessments should also address privacy obligations and how the vendor will support investigation and recovery if a security incident occurs.

Showing 3 most recent headlines Filtered view
Bank Info Security 1 year, 8 months ago

Hacker Poses as Israeli Security Vendor to Deliver Wiper

Phishing Emails Impersonating Eset Target Cybersecurity Professionals With MalwareCybercriminals posing as a top security firm in Israel have launched wiper attacks on local cybersecurity professionals after bypassing significant security measures, according to recent reports. Cybersecurity firm Eset said threat actors did not compromise its systems.

Bank Info Security 19 Oct 2024, 11:30 a.m. Antivirus Compromise Impersonation Israel Malware Phishing Scam Threat Actor Vendor
Bank Info Security 1 year, 8 months ago

BianLian Ransomware Gang Claims Heist of Pediatric Data

Boston Children's Health Physicians Says Incident Involved Unnamed IT VendorRansomware gang BianLian has listed Boston Children's Health Physicians - a pediatric group that practices in New York and Connecticut - on its dark web site, threatening to release stolen patient and employee data. The practice said the September incident involved an IT vendor.

Bank Info Security 19 Oct 2024, 9:30 a.m. Children Dark Web Healthcare Incident Ransomware Theft Vendor
Bank Info Security 1 year, 9 months ago

Revenue Cycle Vendor Notifying 400,000 Patients of Hack

Texas-Based Gryphon Healthcare Says an Unnamed Third Party Was at Center of BreachA Texas-based revenue cycle management firm is notifying about 400,000 individuals of a hacking incident it says originated with another third party. The incident is among a growing list of major breaches implicating vendors and cumulatively affecting tens of millions of patients so far this year.

Bank Info Security 15 Oct 2024, 10:00 a.m. Breach Critical Infrastructure Hacking Healthcare Incident Vendor