Podcast

Alice in Supply Chains - Episode 10

Episode Description:

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) dive into the key themes from newsletter #38, offering expert insights on the latest developments in third-party cyber risk management. They explore whether cybercriminals have become too successful, unpack Jaguar Land Rover’s recent cyber challenges, discuss the true cost of a breach, and explain why effective risk management can’t stop at a company’s borders. Tune in every month for sharp analysis and essential conversations on the evolving landscape of TPCRM.

Show Notes:

Watch or listen to full episodes in English.

Recent episodes

Episode 22

Alice in Supply Chains Episode 22 explores AI security, exposed API keys, and third-party cyber risk with Adrian Sanabria and Alexandre Sieira.

Episode 21

In this episode of the Alice in Supply Chains Podcast, Adrian Sanabria and Alexandre Sieira discuss four stories shaping third-party cyber risk management - from a BGP hijacking that compromised software updates to emerging AI risks, the rise of inside-out scanning in financial institutions, and proposed UK restrictions on risky technology suppliers.

Episode 20 | Recorded Live at Black Hat in Las Vegas!

On episode 20, Adrian and Alexandre discuss four recent stories shaping third-party and AI risk: SOC 2 commitments deferred by vendors, the lessons from Brazil’s PSTI security requirements, AI agents and security incidents involving Hugging Face, OpenAI and Anthropic, and a prompt injection case involving outside counsel in Brazil. The episode explores what these incidents mean for TPCRM, vendor assurance, regulatory compliance, AI governance, and third-party contracts.