Security news aggregator

Latest coverage for Vendor

Vendor security covers risks introduced by suppliers, including software flaws, exposed systems, and weak access to customer data.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Vendor is an external organization that supplies an IT product or service, such as software, hardware, cloud hosting, or managed security. In security reporting, the term usually concerns a third party whose technology, personnel, or connectivity forms part of an organization’s environment or handles its data.

Vendor risk depends on the access and dependency involved. A compromised or poorly secured vendor can expose customer information, introduce vulnerabilities through software updates or components, or provide attackers with a route into connected systems. Practical controls include risk-based due diligence, contractual security and notification requirements, least-privilege access, vulnerability and software-supply-chain review, monitoring, and prompt removal of access when a relationship ends. Assessments should also address privacy obligations and how the vendor will support investigation and recovery if a security incident occurs.

Showing 3 most recent headlines Filtered view
Bank Info Security 3 months, 3 weeks ago

AI Is Redrawing the Cybersecurity Vendor Landscape

Morgan Stanley's Meta Marshall on Where AI Will Disrupt Cybersecurity MarketsAI adoption in cybersecurity is still largely consumer-driven, but real growth depends on enterprise deployment. Meta Marshall, managing director at Morgan Stanley, explains what's holding back adoption, where AI can deliver value and which security segments are most defensible.

More from Bank Info Security 27 Mar 2026, 6:00 a.m. Adoption Artificial Intelligence Vendor
Bank Info Security 3 months, 3 weeks ago

German Police Rouse System Admins From Sleep Over IT Flaw

Police Fanned Out Early Sunday Brandishing an Advisory of a CVSS 10 VulnerabilityPolice officers across Germany roused corporate IT administrators during the early hours of Sunday morning. Their message to bleary-eyed admins was to immediately patch a critical vulnerability in popular product lifecycle management software from U.S. vendor PTC.

More from Bank Info Security 26 Mar 2026, 9:00 a.m. America Critical Vulnerability Flaw Germany Patch Vendor Vulnerability

Omnissa telemetry suggests business buyers are loving Apple and Google End-user compute vendor Omnissa, the company formed by the spin-out of VMware’s virtual desktops, applications, and device management biz, has dug into the telemetry it collects from customers and painted a picture of the world’s enterprise hardware fleet – and the news is better for Google and Apple than it is for Microsoft.…

More from The Register 25 Mar 2026, 8:29 p.m. Apple Google Microsoft Vendor Virtualisation VMware