Cybercriminals Are Now Targeting Your Cybersecurity Vendors—Here’s How to Stay Safe

It’s no longer just banks, hospitals, or law firms in the crosshairs. In a disturbing new shift, cybersecurity companies themselves are becoming high-value targets for sophisticated cyberattacks. SentinelOne, a global leader in endpoint protection, recently defended against one of the most complex and coordinated attacks in recent history, emphasizing just how critical vendor security has become. Nation-state hackers and ransomware gangs are now aiming for supply-chain breaches that can impact thousands of businesses in just one strike. 

Inside the Attacks on SentinelOne 

SentinelOne faced a wave of coordinated attacks involving multiple threat actors. One campaign was traced to PurpleHaze, a China-linked espionage group. After months of scanning SentinelOne’s infrastructure, the attackers infiltrated a third-party hardware vendor in the company’s supply chain. They embedded hidden malware into devices, designed to evade detection by triggering delayed payloads during scheduled reboots. 

Simultaneously, North Korean-affiliated hackers launched a social engineering campaign, submitting over 1,000 fake job applications to SentinelOne in an attempt to gain insider access. Meanwhile, a ransomware group using Babuk malware exploited SentinelOne’s software update process, interrupting it midstream to disable endpoint detection and deploy ransomware during the moment of vulnerability. 

What This Means for Your Business While SentinelOne successfully blocked these attacks, the growing trend of targeting cybersecurity vendors is a clear signal to all businesses: vendor risk is now your risk. If a trusted security provider is compromised, it could expose your systems, even if your own defenses are strong. 

When working with a Managed Service Provider (MSP), it’s critical that they go beyond simply installing security tools. They should have a plan in place to manage vendor-level threats, and you should feel empowered to ask: 

• How do you monitor your security vendors for risks? 

• How quickly are updates and patches deployed? 

• Do you have incident response and backup plans that account for supply-chain breaches? 

• 
  

Partnering for Peace of Mind  

A strong MSP doesn’t just react to threats; they need to anticipate them. At TMGC, we take a layered approach to security that includes vendor risk management, real-time threat monitoring, and proactive client protection. We don’t just wait for threats to happen, but actively monitor and prepare for them. 

Staying safe online requires vigilance at every level. 

Are your Defenses Ready? Get a complimentary review of your system's cybersecurity defense so you can stay safe and run your best. 

Put your IT environment to the test with a FREE Cybersecurity Assessment. This in-depth evaluation identifies vulnerabilities, uncovers potential risks, and offers actionable insights to enhance your cyber resilience. Don't wait for a breach to happen, empower your business with the knowledge to safeguard your data and reputation.