COVID-19: Third-party risks to businesses

This blog warns organizations that COVID-19 themed threat actors are exploiting pandemic-related changes (remote work and expanded third-party use) to launch malware, ransomware, phishing, and DDoS campaigns, and to target third-party vendors as a path to compromise; it outlines three classes of third-party risk (operational, transaction, compliance) and offers mitigation steps such as vendor analysis, pandemic response teams, continuous monitoring, and tracking vendor incidents.