Software Supply Chain Attacks Can Target An Entire Industry Through One Company


Software Supply Chain Attacks Can Target An Entire Industry Through One Company

This week in cybersecurity from the editors at Cybercrime Magazine

– Read the Full Story in Forbes

Sausalito, Calif. – Apr. 4, 2024

The recent exploitation of vulnerabilities in Ivanti’s VPN solutions underscores the growing risk organizations face across their software supply chains, writes Christy Wyatt, CEO at Absolute Software, in a Forbes article.

The Record reports that Ivanti CEO Jeff Abbott published an open letter and 6-minute video to customers pledging to overhaul how the technology-management company builds its products and how it communicates with customers about vulnerabilities.

According to Cybersecurity Ventures, the annual cost of software supply chain attacks on businesses worldwide will rise to $60 billion by 2027, up from $46 billion. Gartner predicts that 45 percent of organizations globally will have experienced software supply chain attacks by next year.

Whether as an organization you have deployed a security stack or one controlled by a “super-agent” that represents a single point of failure, bad actors need only find one way in, according to Wyatt. Once they find that single vulnerability, they can target an entire industry through one company.

Read the Full Story



Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

  • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
  • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
  • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
  • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
  • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
  • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
  • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
  • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
  • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.



Source link