Find notable cyber news and cases, enriched with sources, timelines, and signals.

APAC supplier-risk trend as third-party breaches and manufacturing attacks rise

Target Trend
First reported
Last updated
Happening score
H score 31
1 unique sources, 1 articles

Summary

Hide ▲

APAC organizations are facing a sharper third-party breach pattern, and the concentration of attacks on manufacturing is pushing suppliers and buyers toward tighter cybersecurity requirements. Last year, 34% of cyberattacks hit the region, while 40% of all attacks targeted manufacturing. In Japan and Singapore, third parties were involved in 60% and 71% of attacks, respectively, underscoring how supplier exposure amplifies regional risk.

Related Happenings

NCSC and Cyber Essentials Release of a supply-chain playbook and Supplier Check tool guidance for UK businesses published on 2025-12-15

Public Sector Action
First: 15.12.2025 12:00 Last: 15.12.2025 12:00 Sources 1

About this happening: The **NCSC** issued a **new supply-chain playbook** urging **UK businesses** to embed **Cyber Essentials** as an assurance mechanism and use the **Supplier Check tool** to monitor...

SecurityScorecard acquires HyperComply for vendor risk automation

Industry Action
First: 16.09.2025 01:09 Last: 16.09.2025 01:09 Sources 1

About this happening: **SecurityScorecard** acquired **HyperComply** to expand **third-party risk assessment** and automate vendor questionnaire workflows. The deal consolidates cybersecurity tooling a...

Timeline

  1. 20.08.2025 03:00 1 articles · 9mo ago

    APAC buyers tighten supplier cybersecurity requirements

    Industry Or Public Sector Update

    APAC organizations are tightening supplier cybersecurity requirements as third-party-linked breaches keep rising, with IBM data showing that 34% of cyberattacks targeted the region and 40% targeted manufacturing, while SecurityScorecard reported third parties were involved in 60% of attacks in Japan and 71% in Singapore. In response, Kioxia Holdings notified 3,000 suppliers that it would begin automated scans of their cybersecurity postures, Toppan Holdings said it would use automated audits, onsite interviews, and checklists for 500 partners, and Singapore's financial and cybersecurity agencies proposed requiring vendors to pass the Cyber Essentials Mark or Cyber Trust Mark before government contracts.

    Show sources