The vendor was fine. The channel wasn’t. A third-party risk view of the Claude Code incident
The vendor was fine. The channel wasn’t. Nobody broke into Anthropic. Nobody broke into the companies whose developers were affected. And for…
13 min read
Panorays’ Blog
Learn about the latest research and happenings in third-party cyber risk management.
The vendor was fine. The channel wasn’t. Nobody broke into Anthropic. Nobody broke into the companies whose developers were affected. And for…
13 min read
See which of your suppliers are linked to Cursor. See your supplier exposure Threat intel reportPanorays Threat Center · October 30, 2026…
7 min read
Updated October 27, 2026. This report was refreshed with the latest Threat Center data. The October 24 and October 23 versions are…
32 min read
Of the companies with internet-facing assets running an identifiable PHP version, 97% are using a version vulnerable to PHP2Shell. Two-thirds have at…
11 min read
If you work in security, IT, or risk in Japan, someone in leadership has probably asked you a version of the same…
8 min read
Hackers turned refrigeration systems into a source of disruption across French supermarkets, exposing a blind spot in how businesses assess the cyber…
7 min read
Your organization runs on a complex web of technology that spans everything from on-premises software to cloud platforms to the open-source components…
22 min read
Learn what attack surface management is, how it works, and how continuous visibility helps reduce cyber and vendor risk across your organization.
18 min read
Unauthorized attackers broke into Cencora's systems and stole data tied to patient support programs the company ran for multiple pharmaceutical partners. This…
12 min read
Cybersecurity threats aren’t just more common – they’re more automated and deeply personal. Attackers aren’t simply breaking into systems anymore. They’re manipulating…
13 min read
Cyber security monitoring is the process of continuously monitoring IT infrastructure to detect cyber threats and data breaches.
10 min read
Your organization runs on a sprawling web of digital infrastructure – everything from cloud platforms to identity systems and remote endpoints that…
11 min read
The T-Mobile data breach got attention for a simple reason: attackers didn't need to smash through core systems. They just quietly pulled…
8 min read
Cyberattacks aren’t slowing down. Ransomware crews move faster than ever, social engineering has gotten dangerously good, and supply-chain breaches arrive without warning. Most…
11 min read
The 2023 23andMe data breach wasn’t your typical system hack. Attackers didn’t break through firewalls or exploit zero-day vulnerabilities. Instead, they used…
7 min read
See how Panorays takes control of third-party cyber risk from onboarding to remediation.