Episode 21 | September, 2026

<p>In this episode of the Alice in Supply Chains Podcast, hosts <a href="https://www.linkedin.com/in/adrian-sanabria/" target="_blank" rel="ugc noopener noreferrer">Adrian Sanabria</a> and <a href="https://www.linkedin.com/in/sieira/" target="_blank" rel="ugc noopener noreferrer">Alexandre Sieira </a>discuss the latest news related to third party cyber risk management.</p><p><br>- Story one focuses on a wild BGP hijacking incident that compromised updates for a vendor that makes hypervisor management software (Virtualizor by Softaculous). Attackers were able to take over part of hosting company Hetzner’s IP space, create a valid TLS certificate for Softaculous’s website and serve up an identical copy of the website. Softaculous didn’t cryptographically check the integrity of updates, so the attack succeeded in compromising customers.</p><p><br>- In story two, the Financial Stability Board, an organization created by the G20 after the 2008 financial crisis, warns of risks from AI. The risks were twofold: the AI bubble and threats directly from rogue AI agents.</p><p><br>- In story three, Alexandre shares an observation that, at least in Latin America, financial institutions are writing inside-out scanning into their MSAs.</p><p><br>- Finally, in story four, UK politicians propose to amend the Cyber Security and Resilience bill to expand restrictions on tech suppliers seen as ‘risky’. A troubling addition aims to remove transparency at the same time.</p><p><br><strong>Links - for reference:</strong><br></p><ul><li>Story 1:<a href=" https://arstechnica.com/security/2026/09/well-executed-bgp-attack-uses-hijacked-ips-to-infect-real-networks/" target="_blank" rel="ugc noopener noreferrer"> https://arstechnica.com/security/2026/09/well-executed-bgp-attack-uses-hijacked-ips-to-infect-real-networks/</a></li><li>Story 2: <a href="https://therecord.media/cyber-risk-from-frontier-ai-most-immediate-concern-to-global-finance" target="_blank" rel="ugc noopener noreferrer">https://therecord.media/cyber-risk-from-frontier-ai-most-immediate-concern-to-global-finance</a></li><li>Story 3: No link</li><li>Story 4: <a href="https://therecord.media/uk-technology-national-security" target="_blank" rel="ugc noopener noreferrer">https://therecord.media/uk-technology-national-security</a></li></ul>