Third-party vendors are a well-known risk but they are often not the last point in the supply chain and cybersecurity leaders ...