{"id":32437,"date":"2026-06-04T09:30:00","date_gmt":"2026-06-04T08:30:00","guid":{"rendered":"https:\/\/www.engineernewsnetwork.com\/blog\/?p=32437"},"modified":"2026-06-04T10:50:52","modified_gmt":"2026-06-04T09:50:52","slug":"cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert","status":"publish","type":"post","link":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/","title":{"rendered":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert"},"content":{"rendered":"\n

The UK government’s\u00a02026\u00a0cybersecurity\u00a0survey<\/strong><\/a>\u00a0highlights\u00a0the gap between supply chain\u00a0vulnerabilities\u00a0and the level of preventative measures taken by medium and large firms.<\/p>\n\n\n\n

The survey reports that only 15% of companies review immediate suppliers’ cyber risks, and just 6% review wider supply chain cyber risks.<\/p>\n\n\n\n

Yet all evidence points to the supply chain being a focal point for cyber-attacks, as highlighted by last year’s attack on Jaguar Land Rover, which halted production for several weeks and resulted in a direct cost to the company of almost \u00a3200 million, and cost an estimated \u00a32 billion to the wider UK economy.<\/p>\n\n\n\n

Cybersecurity\u00a0expert Ben Large,\u00a0Head of Cyber\u00a0at\u00a0one of the country’s leading\u00a0technology solutions\u00a0firms,\u00a0Cybit<\/strong><\/a>, commented: “It’s no longer enough to\u00a0keep\u00a0just\u00a0your own systems and networks secure. Most organisations rely on\u00a0connections to\u00a0their supply chains,\u00a0so\u00a0strict access controls\u00a0and\u00a0continuous monitoring\u00a0are now essential.<\/p>\n\n\n\n

“Despite three quarters of UK businesses having basic cyber security provision such as password policies, restricted admin rights, and firewalls, the vast majority are neglecting to consider the risks for business continuity when it comes to their supply chain.<\/p>\n\n\n\n

“This leaves them not only vulnerable to an attack themselves but also risking business continuity if there is an attack on suppliers, putting a question mark over their whole supply chain resilience.<\/p>\n\n\n\n

“Although cyber security is seen as an IT challenge, this makes it a risk factor across the whole business, requiring planning and buy in from a much wider range of departments.”<\/p>\n\n\n\n

Recent high-profile attacks through their supply chain network also include Marks & Spencer and the Co-op who suffered highly disruptive attacks that were traced to a shared third-party vendor.<\/p>\n\n\n\n

The result of these saw Marks & Spencer take a \u00a3300 million profit hit, while the Co-op took a hit of \u00a3206 million in lost sales, and \u00a3120 million in lost profits.<\/strong><\/p>\n\n\n\n

However, there are actions businesses can take to ensure they are mitigating against either a direct cyber-attack through their supply chain, or disruption due to a cyber-attack within it.<\/p>\n\n\n\n

Ben Large explains; “A good starting point would be to mandate that all third parties achieve a minimum recognised certification, such as the government’s Cyber Essentials. This ensures that every supplier has considered, and put in place, measures to protect their business from a cyber-attack.<\/p>\n\n\n\n

“Undertaking a risk assessment across your supply chain to assess continuity issues and contingencies can also ensure the impact of an attack on your business will be minimised.”<\/p>\n\n\n\n

The use of Multi-Factor Authentication (MFA) is highly recommended where third parties have access to a company’s systems, and GCHQ recently recommended companies should replace passwords with passkeys, which are resistant to phishing as they cannot be intercepted, for user-authentication.<\/p>\n\n\n\n

Ben Large continued; “There are now AI tools emerging that can analyse deep into supply chains connections and networks, so a third-party risk management strategy must be put in place that considers every possible entry point to the company’s systems and data.<\/p>\n\n\n\n

“These tools go far beyond current antivirus solutions, which rely primarily on identifying threats based on known virus signatures.<\/p>\n\n\n\n

“Endpoint Detection and Response provides continuous monitoring and analysis of endpoint activities, but they rely on agents installed on owned systems so may not be suitable for securing third-party networks and systems.<\/p>\n\n\n\n

“However, Extended Detection and Response goes beyond this by integrating data from cloud environments, network firewalls, and email gateways, opening up the possibility of extending security boundaries.”<\/p>\n\n\n\n

Ben Large adds that Managed Detection and Response (MDR) currently offers the most complete solution, noting; “MDR deals with a broader range of cybersecurity challenges, incorporating behavioural analysis and real-time intervention.<\/p>\n\n\n\n

“When combined with advanced AI, MDR identifies and deals with risks associated with privilege abuse, account takeovers, and insider threats.”<\/p>\n\n\n\n

The risk of a cyber-attack is real. Overall, 43% of businesses (about 612,000) and 28% of charities (about 57,000) reported having experienced any kind of cyber security breach or attack in the last 12 months, which is on par with the previous year.<\/p>\n\n\n\n

But when you add into the mix the impact of a cyber-attack within your supply chain then the chance of that affecting your business in the next 12 months is significantly higher.<\/p>\n\n\n\n

Ben Large concludes; “Based on this survey, and what we are hearing from our clients, there is a growing need to take a more holistic approach to cyber security, engaging c-suite and logistics departments to ensure supply chain threats are understood and acted upon.<\/p>\n\n\n\n

“Business owners also need to know that it is a legal requirement to report a breach to the Information Commissioner’s Office, when for example, personal data has been stolen.”<\/p>\n","protected":false},"excerpt":{"rendered":"

The UK government’s\u00a02026\u00a0cybersecurity\u00a0survey\u00a0highlights\u00a0the gap between supply chain\u00a0vulnerabilities\u00a0and the level of preventative measures taken by medium and large firms. The survey reports that only 15% of companies review immediate suppliers’ cyber risks, and just 6% review wider supply chain cyber risks. Yet all evidence points to the supply chain being a focal point for cyber-attacks, as highlighted by last …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[199],"tags":[5305,14972,1730],"class_list":["post-32437","post","type-post","status-publish","format-standard","","category-news-views-and-opinion","tag-cybersecurity","tag-cybit","tag-supply-chain"],"yoast_head":"\nCyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network\" \/>\n<meta property=\"og:description\" content=\"The UK government’s\u00a02026\u00a0cybersecurity\u00a0survey\u00a0highlights\u00a0the gap between supply chain\u00a0vulnerabilities\u00a0and the level of preventative measures taken by medium and large firms. The survey reports that only 15% of companies review immediate suppliers’ cyber risks, and just 6% review wider supply chain cyber risks. Yet all evidence points to the supply chain being a focal point for cyber-attacks, as highlighted by last …\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/\" \/>\n<meta property=\"og:site_name\" content=\"Engineer News Network\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-04T08:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-04T09:50:52+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\"},\"headline\":\"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert\",\"datePublished\":\"2026-06-04T08:30:00+00:00\",\"dateModified\":\"2026-06-04T09:50:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/\"},\"wordCount\":901,\"keywords\":[\"cybersecurity\",\"Cybit\",\"Supply Chain\"],\"articleSection\":[\"News, Views and Opinion\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/\",\"name\":\"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#website\"},\"datePublished\":\"2026-06-04T08:30:00+00:00\",\"dateModified\":\"2026-06-04T09:50:52+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/\",\"name\":\"Engineer News Network\",\"description\":\"The ultimate online news and information resource for today's engineer\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\",\"name\":\"admin\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/","og_locale":"en_GB","og_type":"article","og_title":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network","og_description":"The UK government’s\u00a02026\u00a0cybersecurity\u00a0survey\u00a0highlights\u00a0the gap between supply chain\u00a0vulnerabilities\u00a0and the level of preventative measures taken by medium and large firms. The survey reports that only 15% of companies review immediate suppliers’ cyber risks, and just 6% review wider supply chain cyber risks. Yet all evidence points to the supply chain being a focal point for cyber-attacks, as highlighted by last …","og_url":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/","og_site_name":"Engineer News Network","article_published_time":"2026-06-04T08:30:00+00:00","article_modified_time":"2026-06-04T09:50:52+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/#article","isPartOf":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/"},"author":{"name":"admin","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1"},"headline":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert","datePublished":"2026-06-04T08:30:00+00:00","dateModified":"2026-06-04T09:50:52+00:00","mainEntityOfPage":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/"},"wordCount":901,"keywords":["cybersecurity","Cybit","Supply Chain"],"articleSection":["News, Views and Opinion"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/","url":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/","name":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert - Engineer News Network","isPartOf":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#website"},"datePublished":"2026-06-04T08:30:00+00:00","dateModified":"2026-06-04T09:50:52+00:00","author":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1"},"breadcrumb":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/cyber-attacks-via-supply-chain-entirely-avoidable-says-cybersecurity-expert\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.engineernewsnetwork.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Cyber-attacks via supply chain\u00a0entirely avoidable, says\u00a0cybersecurity\u00a0expert"}]},{"@type":"WebSite","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#website","url":"https:\/\/www.engineernewsnetwork.com\/blog\/","name":"Engineer News Network","description":"The ultimate online news and information resource for today's engineer","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.engineernewsnetwork.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1","name":"admin","url":"https:\/\/www.engineernewsnetwork.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/32437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/comments?post=32437"}],"version-history":[{"count":1,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/32437\/revisions"}],"predecessor-version":[{"id":32438,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/32437\/revisions\/32438"}],"wp:attachment":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/media?parent=32437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/categories?post=32437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/tags?post=32437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}