Cisco warns of Internet of Things, Supply Chain Risk

Cisco's annual cybersecurity report warns that insecure IoT devices and lax third-party software security are enabling increasingly automated botnets and more complex supply-chain attacks (e.g., NotPetya, CCleaner). The report also notes attackers are abusing common cloud services for command-and-control and that failures to patch known vulnerabilities (linked to WannaCry and NotPetya) continue to drive large-scale compromises, urging improved vendor scrutiny and basic hygiene.