From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains
Summary: Attackers are increasingly entering through third-party vendors and moving laterally into partner networks, a pattern the article illustrates with the 2024 Change Healthcare ransomware attack, which stole up to 6TB of patients' protected health information and could have been prevented with MFA on the targeted remote server. The piece also cites the 2020 attack on the COVID-19 vaccine supply chain and a March 2025 cyberattack on Ukraine's state-owned railway company, Ukrzaliznytsia, that disrupted passenger and freight transport.
What you should know: The article notes that U.S. tariffs on imported technology, hardware, raw materials, and software may push businesses toward alternative suppliers with varying security standards, raising the likelihood of supply chain attacks - so a procurement decision made to control cost can quietly widen the vendor surface you have to defend.
Read the original at The Hacker News ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026