Supply Chain & Endpoint Security Threats

48% of breaches originate in supply chain; TPRM criticized. BYOVD attacks challenge EDR; OPSWAT offers kernel-agnostic pre-execution inspection. Russian hackers exploit Exchange OWA flaw (OWAReaper) for persistence. Healthcare browser security blind spot: 276M patient records breached in 2024. Sen. Wyden calls for legacy VPN ban linked to 85% of ransomware. APUC (Scotland's University Procurement Hub) breach via admin account compromise, exfiltrating decades of contract data and extortion demand, highlighting supply chain concentration risk in procurement consortia.