Whether you’re a vendor or an enterprise, the supply chain is you. Findings smooths compliance by automating supply chain faster, smarter and at scale.
New York, NY
Joined April 2021
- Tweets1.2K
- Following430
- Followers160
- Likes277
Pinned Tweet
We’ve been quiet here for a while… but for good reasons.
Findings has been growing, innovating, and yes — making big moves.
Time to catch you up 👇🏼
F5. Gmail. Discord. Toys"R"Us.
Different industries, one pattern: third-party and cloud risk are everywhere. Our October 2025 Data Breach Round Up breaks down this past month’s biggest incidents and why continuous visibility is the only real solution. ➡️findings.co/october-2025-dat…
#F5 BIG-IP breach: Source code stolen, 269,000+ devices exposed.
Nation-state hackers gained long-term access to F5’s systems, forcing a CISA emergency directive.
This is what a modern supply-chain attack looks like.
Read the full breakdown → findings.co/the-f5-big-ip-so…
If 52% of breaches involve vendors, what's your #1 vendor risk concern?
0%No real-time visibility
0%Manual audit processes
0%Compliance gaps
0%Budget constraints
0 votes • Final resultsF5 hack highlights what we've been saying: supply chain security isn't "set it and forget it."
$2.5B+ impact to UK economy. One breach. Multiple vendors affected.
Vendors need continuous monitoring, not annual questionnaires.
#f5 #f5securityincident
Regulators in both New York and Europe just issued critical guidance on third-party cyber risk (& it's a wake-up call for every organization.)
The era of static questionnaires and annual vendor reviews is over. Risk now moves at the speed of automation, and compliance must too.
30% of data breaches start with a third party. But here's what nobody tells you: by the time your annual vendor assessment catches the problem, the damage is already done.
Traditional VRM = asking "Are you secure?" once a year
Real-time monitoring = knowing when your vendor's S3 bucket goes public, before your data walks out the door
December 3, 2025: Your SEC Regulation S-P Deadline is 44 Days Away! ⏳
The SEC's sweeping amendments to Regulation S-P are officially enforceable in just over a month, but many organizations still aren't ready.
The automation advantage:
Manual vendor assessments can't keep pace with regulatory timelines. Automated, API-connected compliance tools verify controls in real-time, flag misconfigurations instantly, and maintain audit-ready documentation—turning weeks of work into minutes.