Supply Chain Security 101: An Expert’s View
Summary: In a conversation with Brian Krebs at an Albany cybersecurity conference, Tony Sager of the Center for Internet Security described supply chain security as a decades-old problem now complicated by offshoring, saying the economics of cheaper parts and labor overwhelmed efforts to keep production domestic. Sager said attackers have historically found it more lucrative to compromise the distribution side in targeted markets than to plant something in everything, and that cloud providers building their own hardware and refreshing it every few years raises attacker costs.
What's compelling: Sager's point that the technical ability to detect something wrong has been outpaced by the ability to do something about it leaves detection resting on accountability and traceability - unchangeable logging that can trace a board back to its source - rather than on catching the compromise itself.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026