0xK1L·4d agoCoinbase Wasn’t Breached, Its Analytics Vendor Was: The Amplitude Incident ExplainedBlack October 2026, part 12: a security incident at analytics provider Amplitude exposed contact data for a “small subset” of Coinbase…
0xK1L·4d agoThe Warp Vendor Breach: When Your AI Agent’s Logs Become the TargetBlack October 2026, part 11: an attack on an unnamed third-party vendor in Warp’s infrastructure exposed AI agent traces and telemetry for…A response icon1A response icon1
InReflectizbyOran F·6d agoPolymarket Hack: How a Hijacked DebugBear Script Drained $2.7MIn the Polymarket hack, the script’s URL never changed. The code behind it did. Here’s how a trusted monitoring tool drained 737 accounts…
Travis Ray Caverhill·Oct 30Spearhead Attack: Someone Posed as IT and Walked Into a Law Firm…CrowdStrike’s October 28 investigation reveals that cyber criminals are increasingly targeting law firms for their clients’ most sensitive…A response icon1A response icon1
InSignal & StructurebyRohit Anand·Oct 30The AI Act Got Delayed. Your Customers’ Questionnaires Didn’t.The real AI regulation is arriving through procurement, one spreadsheet row at a time.
Twendee·Oct 29Third-Party Risk Management Needs More Than Vendor QuestionnairesA vendor can pass every security assessment and still expose critical business systems to cyber threats. As enterprises rely on more…
Simplebyrasika·Oct 24Third-Party Risk Management: How to Run Vendor Due Diligence That Auditors Actually AcceptYour vendors can fail an audit for you. SOC 2, ISO 27001, NIS2, DORA and GDPR all expect you to manage supplier risk, and “we collected…
Travis Ray Caverhill·Oct 22The Backup Vendor Had the Keys. So Did the Attacker.The October 2026 ConnectWise incident exposes a dangerous blind spot in cloud security: trusted applications can become privileged…
Saurav Tripati·Oct 21AI Third-Party Risk Management Means Tracking Model Provenance TooA vendor can pass every questionnaire truthfully and still be the weakest link in an AI supply chain. AI third party risk management closes…A response icon1A response icon1
Josepollman·Oct 21The ConnectWise Backup Breach Needed No Customer PasswordA backup app’s own credential, held in the vendor’s tenant, was used to get tokens in customer Microsoft 365 tenants. I ran the vendor…
