Let an expert reveal strategies for detecting, containing, and mitigating risks from fast-evolving, and even AI-boosted supply chain cyberattacks.

Supply chain attacks have quickly become a top concern in today’s interconnected digital world, as recent regional cybersecurity breaches reveal the dangers of relying solely on traditional perimeter defenses.

Attackers are now exploiting trusted third-party vendors and partners to gain access to sensitive systems, making it clear that the boundaries of organizational security extend far beyond internal networks.

What must organizations do to step up to the plate in order to plug all perimeter defense gaps? Ian Farquhar, Security Chief Technology Officer, Gigamon, shared his professional insights on system observability and supply chain security with CybersecAsia.net readers.

CybersecAsia: How have the recent cybersecurity breaches reshaped the way organizations should view perimeter security in today’s interconnected environment?

Ian Farquhar (IF): In a highly interconnected, hybrid cloud world, recent breaches have exposed the limitations of relying on traditional perimeter security. The assumption that critical assets lie safely behind a clearly defined border no longer holds true.

Today, attackers exploit legitimate access paths: through cloud services, remote users, and third-party integrations — to bypass perimeter defenses entirely.

Organizations should recognize that perimeter security alone is insufficient, and shift their mindset from “if an attack will happen” to “where it’s happening.” This requires visibility that extends far beyond the edge: into encrypted traffic, lateral East-West movement, and internal system interactions.

The only way to catch sophisticated threats operating inside the perimeter is through bolstered observability: real-time, network-derived telemetry revealing activity across the full infrastructure.

By acknowledging that no defense is foolproof, organizations can then prioritize fast detection, containment, and response — transforming their security posture from being reactive to being resilient.

CybersecAsia: What are the key vulnerabilities in supply chain security that attackers are increasingly exploiting, and how can organizations identify their weakest third-party links?

IF: Supply chain attacks exploit the implicit trust organizations place in vendors and partners — particularly those with privileged access. Attackers often target the less-protected third parties as entry points, leveraging credential compromise, misconfigured integrations, or overlooked software dependencies to infiltrate other connectable environments.