Security news aggregator

Latest coverage for Vendor

Vendor security covers risks introduced by suppliers, including software flaws, exposed systems, and weak access to customer data.

6 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Vendor is an external organization that supplies an IT product or service, such as software, hardware, cloud hosting, or managed security. In security reporting, the term usually concerns a third party whose technology, personnel, or connectivity forms part of an organization’s environment or handles its data.

Vendor risk depends on the access and dependency involved. A compromised or poorly secured vendor can expose customer information, introduce vulnerabilities through software updates or components, or provide attackers with a route into connected systems. Practical controls include risk-based due diligence, contractual security and notification requirements, least-privilege access, vulnerability and software-supply-chain review, monitoring, and prompt removal of access when a relationship ends. Assessments should also address privacy obligations and how the vendor will support investigation and recovery if a security incident occurs.

Showing 6 most recent headlines Filtered view
Bank Info Security 11 months, 3 weeks ago

Breach Roundup: Suspected XSS Cybercrime Forum Admin Arrested

Also: Clorox Sues IT Vendor Over Password BlunderThis week, XSS forum admin arrested, Clorox sued Cognizant, Lumma Stealer is back, NY regulates water, U.S. maritime cybersecurity rules in effect, new Coyote banking Trojan, a hacker nabbed details of Mexico City auxiliary police, Latin America cyberattacks, and World Leaks stole synthetic data.

More from Bank Info Security 26 Jul 2025, 12:00 a.m. America Banking Breach Cyberattack Cybercrime Forums Lawsuit Leak Mexico Trojan Vendor XSS
Bank Info Security 11 months, 3 weeks ago

Vectra CEO: SOCs Need AI Agents to Keep Up With Attacks

CEO Hitesh Sheth: New AI Offerings Boost Efficiency, Address Modern Network NeedsPresident and CEO Hitesh Sheth details how Vectra AI uses triage, stitching and prioritization agents to enhance SOC performance and curb alert fatigue. The network detection and response vendor is expanding AI Analyst via AWS Bedrock and integrations with Zscaler and CrowdStrike.

More from Bank Info Security 26 Jul 2025, 12:00 a.m. Amazon Web Services Artificial Intelligence Crowdstrike President Vendor Zscaler
Bank Info Security 11 months, 3 weeks ago

Vectra CEO: SOCs Need AI Agents to Keep Up With Attacks

CEO Hitesh Sheth: New AI Offerings Boost Efficiency, Address Modern Network NeedsPresident and CEO Hitesh Sheth details how Vectra AI uses triage, stitching and prioritization agents to enhance SOC performance and curb alert fatigue. The network detection and response vendor is expanding AI Analyst via AWS Bedrock and integrations with Zscaler and CrowdStrike.

More from Bank Info Security 25 Jul 2025, 10:00 a.m. Amazon Web Services Artificial Intelligence Crowdstrike President Vendor Zscaler
Bank Info Security 11 months, 3 weeks ago

Breach Roundup: Suspected XSS Cybercrime Forum Admin Arrested

Also: Clorox Sues IT Vendor Over Password BlunderThis week, XSS forum admin arrested, Clorox sued Cognizant, Lumma Stealer is back, NY regulates water, U.S. maritime cybersecurity rules in effect, new Coyote banking Trojan, a hacker nabbed details of Mexico City auxiliary police, Latin America cyberattacks, and World Leaks stole synthetic data.

More from Bank Info Security 25 Jul 2025, 9:00 a.m. America Banking Breach Cyberattack Cybercrime Forums Lawsuit Leak Mexico Trojan Vendor XSS
Bank Info Security 11 months, 3 weeks ago

File Transfer Flaw Blamed in Health Breach Affecting 233,000

Cierant Corp. Says Cleo MFT Zero-Day Exploit Compromised Health Plan Client DataA Connecticut-based firm that provides print and electronic document management services to health plans has reported to regulators that an exploit of a vulnerability in file transfer software from third-party vendor Cleo has resulted in a health data compromise affecting nearly 233,000 people.

More from Bank Info Security 22 Jul 2025, 9:30 a.m. 0-Day Breach Compromise Exploit Flaw Healthcare Vendor Vulnerability

Cybersecurity researchers have unearthed new Android spyware artifacts that are likely affiliated with the Iranian Ministry of Intelligence and Security (MOIS) and have been distributed to targets by masquerading as VPN apps and Starlink, a satellite internet connection service offered by SpaceX

More from The Hacker News 22 Jul 2025, 5:18 a.m. Android Iran Malware Mobile Research Satellite Spyware Vendor VPN