Data breaches that originate through third parties are more commonplace than organizations are used to. The SolarWinds hack and Kaseya ransomware attack are two recent examples of threat actors exploiting the security practices of third-party vendors to breach an entire network of connected organizations.
Article Link: 5 Vendor Evaluation Tools to Add to Your Cyber Risk Management Toolkit