Supply Chain Risk

The UK government has seen a 20% rise in Cyber Essentials certifications, totaling 61,430 from July 2025 to June 2026. However, many certifications are recertifications, indicating limited new adoption among SMEs. As procurement requirements evolve, expect heightened demand for Cyber Essentials compliance from suppliers, especially within the small and medium enterprise sector.

The U.S. International Trade Commission has begun an investigation into certain mobile devices after GG Technologies filed a complaint against Apple. This may lead to import restrictions, affecting supply chains and compliance for vendors involved in mobile hardware and software.

The WhiteCobra malware, targeting Visual Studio Code users, poses significant cybersecurity risks to government agencies and contractors. Vulnerabilities in commonly used software development tools necessitate enhanced risk management and security assessments to safeguard sensitive data.

A security vulnerability involving **Unisoc**, **Longcheer**, and **Motorola** threatens millions of budget Android devices in Latin America. Procurement professionals need to reevaluate their supply chain security protocols to mitigate risks related to this significant compromise.

The recent compromise of the popular open-source package @asyncapi/specs through a malicious commit highlights critical vulnerabilities in software supply chains. Government agencies and contractors must urgently reassess their security strategies and adopt stringent measures to protect against similar supply chain attacks.

The U.S. International Trade Commission is investigating patent infringement in energy drink labeling following a complaint from Monster Energy Company. This may lead to significant trade implications for suppliers and manufacturers involved in these products.