Supplier Shield

10/08/2026

A self-propagating worm has infected more than 400 npm packages, the shared building blocks that sit inside millions of JavaScript projects. Microsoft Threat Intelligence, which named the campaign ChainDrop, reported on 4 August 2026 that the malware steals developer and cloud credentials, then uses those stolen keys to publish poisoned versions of still more packages on its own.

Affected code includes widely used utilities such as keyv, flat-cache and cache-manager. Any organisation whose developers or build systems installed a bad version may have leaked npm, GitHub, cloud and secret-store credentials. The lesson: one open-source dependency, compromised at the source, can reach every secret downstream.

Here we explain you what happened and why it matters for third-party risk management

https://zurl.co/u494i

A self-propagating worm named ChainDrop poisoned 400+ npm packages, including keyv and flat-cache, stealing developer and cloud credentials. Why it is a third-party risk.

06/08/2026

A phishing attack at Xsolis, a US healthcare vendor that many hospitals and insurers use to review whether care is covered, exposed the data of about 1.4 million people. Patients at Mayo Clinic, UW Medicine and VHC Health were among those affected, because one vendor held records from many providers at once.

https://zurl.co/NF7nd

A phishing attack at Xsolis, a healthcare vendor used by many US hospitals, exposed about 1.4 million people's data, reaching Mayo Clinic, UW Medicine and VHC Health.

05/08/2026

Amgen disclosed in a filing with the US Securities and Exchange Commission that attackers stole patient protected health information and proprietary company data from cloud systems operated by third-party service providers, not from Amgen's own network. The company detected unauthorised activity in July 2026 and concluded on 29 July 2026 that the incident was material, based on the volume of records involved and the sensitivity of the data. Amgen says it activated its incident response plan, contained the activity and engaged outside forensic investigators, and reports no disruption to its products, manufacturing, financial reporting or supply of medicines.

Several details are unconfirmed: Amgen has not named the cloud providers, explained how the systems were accessed, given a number of affected people, or attributed the attack. The third-party risk pattern is supplier cloud exposure: regulated data held in an external provider's systems can be taken without any attacker touching the company's own network, yet the breach notification, regulatory exposure and reputational cost stay with the data owner.
https://zurl.co/RaQRT

Amgen told the SEC that patient health data and proprietary information were stolen from third-party cloud systems, not its own network. What it means for supplier cloud risk.

16/07/2026

Which companies does the software economy actually run on? We read the public GDPR Article 28 sub-processor disclosures of 163 widely used B2B SaaS vendors and canonicalised who each one depends on. The finding: 92% run on Amazon Web Services and close to 100% depend on at least one of just three companies (AWS, Microsoft Azure, or Google Cloud), so a single incident at one provider would reach almost every tool at once. A second finding emerged during collection: roughly four in ten vendors no longer publish a readable, open list, moving disclosures behind trust portals and NDAs even as DORA and NIS2 demand more supply-chain transparency.

https://zurl.co/6Kl9e

New research mapping 163 SaaS vendors' sub-processors: 92% run on AWS, ~100% on a top-three cloud, and disclosures are going dark. The 2026 Fourth-Party Map.

16/07/2026

SonicWall confirmed two actively exploited SMA 1000 zero-days (CVE-2026-15409, CVE-2026-15410). Why a remote-access appliance is a third-party concentration risk
https://zurl.co/E7Tgc

SonicWall confirmed two actively exploited SMA 1000 zero-days (CVE-2026-15409, CVE-2026-15410). Why a remote-access appliance is a third-party concentration risk.

15/07/2026

An attacker hijacked Jscrambler's npm package with a stolen publishing credential and shipped an infostealer to developers. Why a trusted dependency is a third-party risk. https://zurl.co/4vUC0

An attacker hijacked Jscrambler's npm package with a stolen publishing credential and shipped an infostealer to developers. Why a trusted dependency is a third-party risk.

15/07/2026

Lidl's online shop breach started at an external IT service provider, exposing customer data across Germany, Belgium and the Netherlands. What it means for GDPR processor risk.
https://zurl.co/ldvio

Lidl's online shop breach started at an external IT service provider, exposing customer data across Germany, Belgium and the Netherlands. What it means for GDPR processor risk.

10/04/2024

🌍 Celebrating Diversity at Supplier Shield 🌍

At Supplier Shield, we believe our strength lies in our diversity. Our vibrant team is a mosaic of talents, perspectives, and cultures, making us who we are today: a dynamic, innovative, and inclusive workplace.

Here's a glimpse of the diversity that thrives within our walls:

🌐 10 Nationalities: Our team members hail from across the globe, bringing with them a rich tapestry of cultural backgrounds and experiences.

🕰️ Age Range from 19 to 62: We span generations, from energetic youths starting their journeys to seasoned professionals sharing their incredible expertise. This age diversity fuels creativity and learning.

⚖️ Gender Balance: With a composition of 55% men and 45% women, we strive towards achieving gender parity, valuing the unique insights and perspectives each gender brings to the table.

🗣️ 9 Languages Spoken: Our daily conversations are a blend of different languages, showcasing the linguistic diversity that adds depth to our communication and understanding.

Diversity is not just a corporate value; it's our reality and strength. It fosters innovation, creativity, and a sense of belonging, ensuring we remain at the forefront of our industry.

Join us in celebrating the diverse identities that make Supplier Shield a truly unique place to work. Together, we are more innovative, more agile, and more resilient.

14/12/2023

From the entire Supplier Shield team, we would like to wish you and your loved ones (and your IT systems 😉) a safe and secure holiday season, filled with joy and laughter! 🎄🎁🎊🎉

-------------------------------------------

L'équipe Supplier Shield vous souhaite, ainsi qu'à vos proches (et systèmes IT😉) de très belles fêtes de fin d'année, dans la joie et la bonne humeur ! 🎄🎁🎊🎉

01/08/2023

Nous aimerions souhaiter à tous ceux en Suisse ainsi que les Suisses à l’étranger une Bonne Fête Nationale!

🎊 🎉

We’d like to wish everyone in Switzerland as well the Swiss living abroad a Happy National Day!

🎊 🎉