More and more companies rely on external suppliers, which opens up new attack vectors. A single vulnerability in the supply chain can be exploited to compromise multiple organizations, making third-party risk management a top priority.
Typical signals
- New/changed dependencies, sudden build-script changes
- Compromised maintainer accounts, CI secrets exfiltration
- Unexpected traffic to unknown domains from web/apps
Current-state check
- Limit trust: SBOM, dependency pinning, signed artifacts (SLSA)
- Vendor monitoring: security advisories, KEV mapping, patch SLAs
- Detect "typosquat" packages and malicious browser/CDN scripts
