Resources

Articles

The latest commentary and blogs from Risk Ledger’s network of experts on cyber security, supply chain risk, industry trends and more.

WS_FTP Server: Emerging Threat published on Risk Ledger

Emerging Threat

WS_FTP Server: Emerging Threat published on Risk Ledger

All versions of Progress Software’s WS_FTP Server are affected by two critical vulnerabilities. These vulnerabilities allow for arbitrary code execution and file traversal on the server. This article ...

October 4, 2023

・

3

mins read

Risk Ledger Wins Financial Times' Tech Champion 2022 Award

Risk Ledger Wins Financial Times' Tech Champion 2022 Award

As hacking threats increase worldwide, The FT names Risk Ledger as one of their Tech Champions and takes a look at how we help...

The State of Cyber Security in the Supply Chain

The State of Cyber Security in the Supply Chain

Data Insights Report 2023

Securing Public Sector Supply Chains: Moving Beyond Third-Party Risk Management

Securing Public Sector Supply Chains: Moving Beyond Third-Party Risk Management

Discover how escalating state-sponsored cyber attacks, especially on weak links in organisations' supply chains, are threatening public sector organisations, and how best to harden public sector suppl...

October 29, 2023

Co-Founder & CEO

The Future of Supply Chain Cyber Security: Identifying concentration risk to enhance operational resilience

The Future of Supply Chain Cyber Security: Identifying concentration risk to enhance operational resilience

To enhance operational resilience, identifying concentration risk deep in your supply chains is key. Find out how to do this and how Risk Ledger can help.

September 14, 2023

Co-Founder & CEO

Score & Report on your Supplier Risks

Score & Report on your Supplier Risks

Now, you can select impact and likelihood values when opening a risk.

September 10, 2023

The Future of Supply Chain Cyber Security: Taking a Social Network Approach

The Future of Supply Chain Cyber Security: Taking a Social Network Approach

Attacks on organisations' supply chains are on the rise and new approaches are urgently needed. Find out about Risk Ledger's approach to shape the future of supply chain cyber security.

August 31, 2023

Discovering the ‘Unknown Unknowns’ of Financial Services Supply Chain Cyber Risk

Discovering the ‘Unknown Unknowns’ of Financial Services Supply Chain Cyber Risk

Read about the major geopolitical and technological changes that have been escalating cyber risks in the financial services industry. The article discusses recent announcements made by Russian threat ...

Blast Radius of MOVEit Transfer Attack Widening

Emerging Threat

Blast Radius of MOVEit Transfer Attack Widening

There is now also more information on the vulnerability as well as who first exploited it.

MOVEit Transfer Vulnerability: Emerging Threat published on Risk Ledger

Emerging Threat

MOVEit Transfer Vulnerability: Emerging Threat published on Risk Ledger

A critical SQL injection vulnerability has been identified in Progress Software’s MOVEit Transfer product that is proven to result in unauthorised access to files and the ability for arbitrary code ex...

MOVEit Transfer Vulnerability: Lack of Supply Chain Visibility Exacerbates Breach

Emerging Threat

MOVEit Transfer Vulnerability: Lack of Supply Chain Visibility Exacerbates Breach

The latest Risk Ledger article discusses the recent MOVEit Transfer vulnerability and associated Zellis breach, and the importance of supply chain visibility in mitigating such incidents. With thousan...

Vendor Risk Management: What Is It & How Do I Conduct It?

Vendor Risk Management: What Is It & How Do I Conduct It?

Read our ultimate guide to vendor risk management, why it’s important and how to use vendor risk management tools can help you through the process.

A spotlight on legacy systems

A spotlight on legacy systems

Which industries have the highest proportion of legacy systems which are no longer supported by manufacturers and no longer receive security updates?

Clearer Assessment Columns

Clearer Assessment Columns

We heard your feedback and today, we're making things simpler for you by only providing three key assessment and reassessment columns.

February 13, 2023

Improving Supplier Invites

Improving Supplier Invites

We're making it easier and clearer for suppliers to sign up directly from an invite.

February 2, 2023

Enhanced Discussions Inbox

Enhanced Discussions Inbox

Today, we're introducing a new discussions inbox, enabling you to more easily connect and communicate with other security teams on Risk Ledger.

January 17, 2023

The State Of Security: Finance

The State Of Security: Finance

Our report shows what more than 200 vendors supplying the financial industry have reported what practises they've implemented when it comes to physical security, cyber security, third-party risk manag...

December 20, 2022

Did the Big 4s predictions for TPRM come true?

Did the Big 4s predictions for TPRM come true?

We’ve looked back at what the Big 4 consultancy firms’ TPRM predictions were for 2022, and analysed if they actually came true or not.

December 16, 2022

What Is The NIS 2 Directive and What Does It Mean For You?

What Is The NIS 2 Directive and What Does It Mean For You?

The NIS 2 directive was drafted to increase cyber security resilience across EU member states’ CNI. Find out what this means for you.

November 16, 2022