Breaches Beyond Borders: The global landscape of third-party risk

SecurityScorecard’s Global Third-Party Cyber Breach report and accompanying webinar warn that third-party relationships amplify cyber risk, citing supply-chain incidents (SolarWinds) and a high-impact ransomware attack on Change Healthcare by BlackCat/ALPHV that involved a $22M ransom; the report also notes rising nation-state APT activity (e.g., APT31), geographic concentrations of attacks, and provides recommendations such as prioritizing third-party risk management, applying patches for CVE-2023-34362/CVE-2023-4966/CVE-2023-45727, and avoiding ransom payments where possible.