Cybersecurity firm, CrowdStrike published results for a new survey on Securing the Supply Chain. The findings are timely, in light of the recent DHS briefing that Russian Government threat actors are currently present within U.S critical infrastructure systems, as well as many other major data breaches and network compromises that have been enabled through the compromise of supply chain/third-party vendor access in recent years. A summary of key findings reveals the majority (66%) of respondents experienced a software supply chain attack within the past twelve months, and 90% confirmed they subsequently incurred a financial cost as a result, with an average cost over $1.1 million per attack. The survey further illuminates the acknowledgement of the increasing threat from supply chain compromises, as well as the deficiency of most organizations to properly manage third party risk through a comprehensive vendor risk management program. Help Net Security.