vendor risk — Cybersecurity News