Topic

Third-party app supply chain

Risk that arrives through marketplace apps and integrations a customer installs on a platform, where the app vendor holds credentials reaching into customer data.

Current clusters

security1 publisher

Attackers used a stolen Ribon app key to read shopper records across BigCommerce stores

A credential held by a third-party app vendor gave attackers four days of access to shopper records in BigCommerce stores. Cutting off that access meant uninstalling the app.

Publishers:bleepingcomputer.com

Reality

Evidence60
Adoption30
Hype gap+10
Incentives65
Confidence55