Supply Chain Breaches Up 68% Year Over Year, According to DBIR

Verizon's DBIR shows a steep rise in supply-chain breaches in 2023—many tied to exploited third-party software vulnerabilities (CVEs), backdoors/C2, and extortion—prompting recommendations to view vulnerability management holistically as part of vendor management and to use external signals (such as SEC disclosures) to avoid and mitigate weak links in the supply chain.