Supply chain attacks surge with orgs 'flying blind' about dependencies

SecurityScorecard’s survey of 550 security leaders and Verizon’s DBIR 2024 indicate a sharp rise in third‑party/supply chain breaches amid poor visibility into nth‑party risk: most organizations monitor less than half of their supply chain, 71% suffered at least one material incident in the past year, and third‑party breaches doubled year‑over‑year. The report cites SOC data overload and ineffective self‑reported questionnaires as key blockers, and advocates a resilience‑oriented approach—comprehensive risk assessments, continuous monitoring, formal vendor onboarding/offboarding, transparent vendor engagement, cyber insurance, training, and joint tabletop exercises—to move beyond prevention toward rapid detection, response, and recovery.