The Company You Keep – Preparing for supply chain attacks with Talos IR
Summary: Cisco Talos outlines three supply chain risk scenarios - SaaS applications, third-party vendor access, and the software supply chain - and notes that a search for supply chain attack articles published after 2016 returns 39.7 million results, versus 9.5 million for earlier articles. The piece cites the SolarWinds breach, estimated to affect 18,000 customers, along with Target's compromise through an HVAC contractor and Uber's access via a compromised contractor account, and notes a shift in software supply chain attacks from mostly state-sponsored groups to a broader spectrum of cybercrime operators.
Bottom line: Supply chain risk management typically stops at a single degree of separation, and the SolarWinds breach alone reached an estimated 18,000 customers - most of whom had no definitive knowledge that a link in their own supply chain had been hit.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026