SCWorlld.com reported that “Enterprises increasingly rely on technologies, services and systems they don’t fully control. Software runs on third-party code and cloud infrastructure.” The October 1, 2026 article entitled “Cyber resilience is becoming a supply-chain problem” (https://tinyurl.com/2r7d8zcx) included these comments:
AI agents are being connected to enterprise applications, data and identities. Operational technology is increasingly integrated with traditional IT systems. A disruption in any one of those environments can quickly spread across systems, organizations and business processes.
For security leaders, that creates a different kind of resilience challenge. Knowing that a vulnerability, compromised supplier or poorly governed AI system presents a risk is one thing. Understanding what the organization depends on, how those dependencies connect and what happens when one fails is another.
The issue isn’t simply that organizations have more technology to secure. It’s that the relationships among those technologies are becoming more complex, and responsibility for managing the resulting risks is often spread across security, IT, technology teams, business units and third parties.
Anyone surprised?
First published at https://www.vogelitlaw.com/blog/supply-chain-ai-cybersecurity-attacks-a-major-problem