Ernest Tanjong

Most organisations invest heavily in defending their own perimeter, their firewalls, their endpoints, their staff awareness. Yet some of the most damaging incidents of recent years have entered not through the front door, but through a trusted supplier. When a vendor is breached, every organisation that depends on that vendor can inherit the consequences, often with little warning and no direct control over the response. This is supply-chain risk, and it has become one of the defining...

Phishing remains the single most reported form of cybercrime and one of the cheapest attacks to launch, yet among the most expensive to suffer. IBM (2025) estimates the average cost of a breach that begins with phishing at approximately USD 4.8 million, while the FBI's Internet Crime Complaint Centre recorded 191,561 phishing and spoofing complaints in 2025, more than double any other reported category (FBI IC3, 2026). For years, the standard advice to organisations has been simple: enable...