Security news aggregator

Latest coverage for Vendor

Vendor security covers risks introduced by suppliers, including software flaws, exposed systems, and weak access to customer data.

8 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Vendor is an external organization that supplies an IT product or service, such as software, hardware, cloud hosting, or managed security. In security reporting, the term usually concerns a third party whose technology, personnel, or connectivity forms part of an organization’s environment or handles its data.

Vendor risk depends on the access and dependency involved. A compromised or poorly secured vendor can expose customer information, introduce vulnerabilities through software updates or components, or provide attackers with a route into connected systems. Practical controls include risk-based due diligence, contractual security and notification requirements, least-privilege access, vulnerability and software-supply-chain review, monitoring, and prompt removal of access when a relationship ends. Assessments should also address privacy obligations and how the vendor will support investigation and recovery if a security incident occurs.

Showing 8 most recent headlines Filtered view

Security Leadership in Focus - From AI Risks to Cloud ResponsibilityAI fragmentation, non-human identities and nation-state threats dominated conversations at the Gartner Security & Risk Management Summit. ISMG editors discuss how the event stood out for its vendor-neutral focus and strategic discussions tailored for senior security decision-makers.

More from Bank Info Security 14 Jun 2025, 4:00 a.m. Artificial Intelligence Cloud Nation State Strategy Vendor

Security Leadership in Focus - From AI Risks to Cloud ResponsibilityAI fragmentation, non-human identities and nation-state threats dominated conversations at the Gartner Security & Risk Management Summit. ISMG editors discuss how the event stood out for its vendor-neutral focus and strategic discussions tailored for senior security decision-makers.

More from Bank Info Security 14 Jun 2025, 1:30 a.m. Artificial Intelligence Cloud Nation State Strategy Vendor

Good news: The vendor patched the flaw in January. Bad news: Not everyone got the memo Ransomware criminals infected a utility billing software providers' customers, and in some cases disrupted services, after exploiting unpatched versions of SimpleHelp’s remote monitoring and management (RMM) tool, according to a Thursday CISA alert.…

More from The Register 13 Jun 2025, 11:55 a.m. CISA Flaw Infection Patch Ransomware Vendor
Bank Info Security 1 year, 1 month ago

How to Get a Clearer Picture of Vendor Risk

Experts Call for Continuous Assessments of Vendor Risk - Not Just at OnboardingAs vendor ecosystems grow in complexity, many organizations still view third-party risk management as a static assessment of vendors as they're onboarded. But organizations often focus too heavily on upfront vetting of vendors and fail to track how their risk profiles may change over time.

More from Bank Info Security 11 Jun 2025, 1:30 p.m. Third-Party Risk Vendor
Bank Info Security 1 year, 1 month ago

NHS: Blood Supply Still Affected by June 2024 Vendor Attack

NHS in England Urging One Million People to Donate Blood to 'Secure' SupplyThe National Health System in England is still dealing with blood supply issues one year after a ransomware attack on a British pathology laboratory services provider disrupted patient care and testing services at several London-based hospitals and triggered a nationwide blood shortage.

More from Bank Info Security 10 Jun 2025, 7:00 a.m. Healthcare Ransomware Vendor

SentinelOne discovered the campaign when they tried to hit the security vendor's own servers An IT services company, a European media group, and a South Asian government entity are among the more than 75 companies where China-linked groups have planted malware to access strategic networks should a conflict break out.…

More from The Register 9 Jun 2025, 10:01 p.m. China Europe Government Malware Strategy Vendor