Posts Tagged ‘third-party risk’
N-central CVE-2026-18577 Auth Bypass — CISA 3-Day Deadline
N-central CVE-2026-18577 auth bypass is being actively exploited to seize administrative control of N-able N-central servers — a remote monitoring and management (RMM) platform managed service providers (MSPs) use to run client networks. CISA gave federal civilian agencies just three days to patch, with the deadline landing August 6, 2026. What Happened N-able disclosed that…
Read MoreStadler Rail Everest Ransomware: SFr10m Demand Refused
The Stadler Rail Everest ransomware incident shows what a mature extortion response looks like: the Swiss train manufacturer confirmed that the Everest group stole supplier technical data through a shared data-exchange platform and demanded roughly SFr10m (about $12.3M) — and Stadler refused outright, filing a criminal complaint instead of negotiating. What Happened Stadler Rail, an…
Read MoreEY Third-Party Data Breach: 15 Days Inside Helpdesk
EY third-party data breach: attackers spent 15 days inside a support-ticketing platform used by Ernst & Young’s tax practice, walking out with client tax filings, Social Security numbers and financial account data before anyone noticed — the firm’s third vendor-side security failure in under three years. What Happened This EY third-party data breach ran from…
Read MoreTop 5 Cybersecurity News Stories May 15, 2026
This week’s Top 5 Cybersecurity News Stories May 15, 2026 are not a recap. They are a strategic read of where trust is breaking down — not inside technical systems, but inside the layers organizations have never thought to defend. A manufacturing supplier trusted to protect customer infrastructure. A professional services firm trusted to handle…
Read MoreThe New Era of Software Supply Chain Risk
Modern businesses are now software businesses, and software supply chain risk is now a business risk, not just a developer problem. Whether you manufacture industrial components, process financial transactions, run logistics networks, or operate online storefronts, your business likely depends on ERP systems, customer portals, payment integrations, cloud workloads, APIs, automation scripts, and other layers…
Read More