Third-Party Risk

2 pieces in Third-Party Risk.

Research 5 MIN

Turning the 2025 DBIR Into Budget Decisions

May 15, 2025 Claire Donnelly Risk & Governance

Third-party involvement in breaches doubled. Ransomware showed up in more breaches even as fewer victims paid. Edge devices became a fifth of exploitation targets. What each shift should change in next year’s plan.

Article 4 MIN

The Bybit Theft Started on Someone Else's Laptop

March 06, 2025 Claire Donnelly Third-Party & Supply Chain Risk

The largest theft in cryptocurrency history didn’t break the exchange’s cold-wallet controls. It changed what the signers saw. The lessons apply to any organization that approves high-value actions through a vendor’s interface.