SpyCloud Launches Supply Chain Solution to Combat Rising Third-Party Identity Threats

SpyCloud has unveiled its Supply Chain Threat Protection solution, designed to extend identity threat protection across the extended workforce and vendor ecosystems. The roll-out, announced on 14 January 2026, promises real-time visibility into vendor identity exposures by moving beyond static risk scores to address active threats such as phishing and credential theft.

The tool includes an Identity Threat Index and real evidence of compromise sourced from recaptured breaches, malware, and phishes, giving security teams actionable intelligence to prioritise responses. It also highlights compromised applications on supplier devices and enables enhanced vendor management with shared, evidence-based reports. For government agencies and critical infrastructure operators, the capability aims to help identify when suppliers have been compromised to prevent access to essential systems.

According to Verizon Data Breach Investigations Report, 2025, third-party involvement in breaches doubled year over year from 15% to 30%, underscoring the growing importance of real-time supply chain visibility.