Tenchi Security ads

Episode #20 of the Alice in Supply Chains Podcast is now live! For the first time, we recorded the episode in person, with our hosts Alexandre Sieira (Tenchi Security) and Adrian Sanabria - straight from Black Hat in Las Vegas! While the just-released Issue #48 of the newsletter covers the latest developments and biggest stories across the supply chain security landscape, this episode takes some of these stories further - and brings a few new ones into the conversation, with the kind of questions and debates that are better explored out loud. The conversation digs into what happened through Hugging Face’s technical timeline, with reporting from Reuters’ Raphael Satter and Deepa Seetharaman - as well as a cybersecurity analysis from Kayne McGladrey, CISSP. We also bring in Meredith Whittaker, President of the Signal Technology Foundation, whose perspective challenges the “rogue AI” narrative and points to a crucial part of the story: the systems, safeguards, and decisions that shape how these incidents unfold. Alexandre and Adrian also delve into the “trust me, I’ll eventually get you a SOC 2” trend, drawing on Kelsey Waters's observation that enterprise buyers are giving startups time to obtain a SOC 2 while the contract itself provides the revenue to fund the compliance effort. Episode 20 also explores a case in Brazil where outside counsel for a major cosmetics company embedded a prompt injection in a court filing to manipulate an automated judicial system - a striking example of how third-party AI use is becoming more than a data-leakage concern. Hugo Cilo at Brazil Economy reported on the case, which raises an uncomfortable question: what should organizations expect from vendors and outside counsel when AI is deliberately misused? From SOC 2 shortcuts to AI agents and prompt injection, Episode 20 gets into the questions behind these stories - and what they mean for the vendors, technologies, and third parties we trust every day. Listen or watch now on our website or favorite streaming platform! Our website: https://lnkd.in/dR39NPui Youtube: https://lnkd.in/dXPYHu8P Spotify: https://lnkd.in/dB3aTUQv Apple: https://lnkd.in/d25yJBXf Newsletter #48: https://lnkd.in/dQrQEvbW #Cybersecurity #TPCRM #ThirdPartyRisk #SupplyChainSecurity #InformationSecurity #AISecurity #TPRM #cyberpodcast

What are the third-party cyber risk stories shaping the conversation this month? Issue #47 of Alice in Supply Chains Newsletter explores why organizations need to rethink ownership in TPCRM. From vendor breaches and software supply chain attacks to AI sovereignty and evolving regulations, this edition explores some of the trends reshaping third-party cyber risk management - and what they mean for businesses. Inside, you'll discover why a single compromised package can put thousands of organizations at risk, what the temporary restrictions on Anthropic's latest AI models reveal about the future of AI sovereignty, why telecom cybersecurity requirements are once again under review, and what Verizon's new Breach Impact Study tells us about the true financial impact of cyber incidents. We also cover the latest third-party breaches, government developments, and practical resources for cyber risk professionals. Whether you're focused on security, risk, procurement, or compliance, we hope this month's insights help you navigate an increasingly complex cyber risk landscape. Enjoy the read! #CyberNewsletter #CyberNews #TPCRM #TPRM #AliceinSupplyChains #SpplyChain #Vendors #AISC

Grandes organizações, como bancos e seguradoras, não avaliam fornecedores por amostragem. Eles buscam evidências reais de segurança. Sua empresa sabe exatamente onde está exposta? O Zanshin Community Edition aplica essa mesma abordagem na sua empresa, sem custo e sem cartão de crédito. Primeiro relatório pronto em cerca de 30 minutos.

Você sabe qual é o score de segurança da sua empresa? Grandes organizações analisam a maturidade de seus fornecedores antes de fechar contratos. Quanto antes você identificar seus pontos de atenção, mais preparado estará para essas avaliações. O Zanshin Community Edition gera seu score em cerca de 30 minutos, identifica riscos e aponta oportunidades de melhoria - sem custo, sem cartão de crédito e com acesso somente leitura.

Seus clientes já pediram evidências dos seus controles de segurança antes de fechar um contrato? Cada vez mais organizações exigem comprovações concretas da maturidade de segurança de seus fornecedores. O Zanshin Community Edition ajuda sua empresa a identificar riscos, monitorar continuamente sua postura de segurança e demonstrar sua evolução ao longo do tempo. Sem custo. Sem cartão de crédito. Primeiro relatório em cerca de 30 minutos.

Se sua empresa vende para grandes organizações, avaliações de segurança já fazem parte do processo de contratação. A pergunta não é se elas vão acontecer, mas quando. O Zanshin Community Edition entrega seu score de segurança em cerca de 30 minutos, com acesso somente leitura e sem custo. Você descobre onde estão os riscos antes que um cliente pergunte - sem custo, sem cartão de crédito e com acesso somente leitura.