Posts Tagged ‘third-party risk’
Stadler Rail Everest Ransomware: SFr10m Demand Refused
The Stadler Rail Everest ransomware incident shows what a mature extortion response looks like: the Swiss train manufacturer confirmed that the Everest group stole supplier technical data through a shared data-exchange platform and demanded roughly SFr10m (about $12.3M) — and Stadler refused outright, filing a criminal complaint instead of negotiating. What Happened Stadler Rail, an…
Read MoreEY Third-Party Data Breach: 15 Days Inside Helpdesk
EY third-party data breach: attackers spent 15 days inside a support-ticketing platform used by Ernst & Young’s tax practice, walking out with client tax filings, Social Security numbers and financial account data before anyone noticed — the firm’s third vendor-side security failure in under three years. What Happened This EY third-party data breach ran from…
Read MoreTop 5 Cybersecurity News Stories May 15, 2026
This week’s Top 5 Cybersecurity News Stories May 15, 2026 are not a recap. They are a strategic read of where trust is breaking down — not inside technical systems, but inside the layers organizations have never thought to defend. A manufacturing supplier trusted to protect customer infrastructure. A professional services firm trusted to handle…
Read MoreThe New Era of Software Supply Chain Risk
Modern businesses are now software businesses, and software supply chain risk is now a business risk, not just a developer problem. Whether you manufacture industrial components, process financial transactions, run logistics networks, or operate online storefronts, your business likely depends on ERP systems, customer portals, payment integrations, cloud workloads, APIs, automation scripts, and other layers…
Read MoreFebruary 2026 Cybersecurity Round-Up
If there’s anything the world will remember February 2026 for, it’s the war that started in the Middle East on the final day of the month. However, for those with an interest in cybersecurity, the preceding 27 days also provided a lot of noteworthy news. Here’s a roundup of the key cyberattacks and CVEs we…
Read More