Join Alexandre Sieira (CTO & Cofounder, Tenchi Security) and Adrian Sanabria (Principal Researcher, The Defender's Initiative) as they unpack the most relevant stories from our latest Alice in Supply Chains newsletter (issue #40) - and discuss what they mean for third-party cyber risk management.

Topics approached on the last podcast of 2025:

- Trends in Supply Chain Attacks in general, as observed through this year;

- The Risks of Ignoring Corporate Culture in Third-Party Due Diligence

- CISOs Are Losing Control of Their Security Outcomes

- Cyber Insurance

Join Alexandre Sieira (CTO & Cofounder, Tenchi Security) and Adrian Sanabria (Principal Researcher, The Defender's Initiative) as they unpack the most relevant stories from our latest Alice in Supply Chains newsletter (#39) - and discuss what they mean for third-party cyber risk management.

In this episode, the duo dive into:

• Liability in the Age of AI: Who is truly accountable when AI "hallucinates" and causes reputational or financial damage?

• The Fog of War in Breach Reporting: Why early breach disclosures are often highly inaccurate ?

• The Cloud Availability Crisis: It’s not just AWS and Azure. We analyze the recurring, major outages impacting global infrastructure - and the critical dependencies putting your entire digital supply chain at risk.

Don't miss their expert discussion on navigating modern digital supply chain risks!

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) celebrate the 3rd anniversary of the Alice in Supply Chains newsletter - the very starting point for this podcast. Together, they revisit key highlights from issue #37, unpacking the stories shaping today’s supply chain security landscape:

-The Salesloft “Perfect One Attack, Use Many” case-Vendors charging customers to complete security questionnaires-New CISA tools for supply chain security-The Sinqia compromise and the HSBC BRL theftStay tuned, every month, for in-depth insights, expert analysis, and key discussions on TPCRM challenges.

Alice in Supply Chains is a monthly podcast inspired by the Alice in Supply Chains newsletter, delivering sharp discussions and insights on all things related to third-party cyber risk management (TPCRM). Hosted by two of the industry’s leading voices - Alexandre Sieira, Co-founder & CTO of Tenchi Security, and Adrian Sanabria, Principal Researcher at The Defender’s Initiative - the show offers expert analysis and practical takeaways to help you navigate today’s complex cybersecurity landscape.

In this episode, they dive into three standout stories from issue #36 of the newsletter of the same name, Alice in Supply Chains:

• How third-party disruptions can derail operations;

• The unusual case of Clorox vs. Cognizant;

• Why relying on EU cloud regions may not guarantee data sovereignty - and Microsoft’s admission to French customers.

Alice in Supply Chains is a monthly podcast by Tenchi Security based on the Alice in Supply Chains newsletter that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM).

It's hosted by two leading voices in the industry, Alexandre Sieira, Tenchi Security's CTO and Co-Founder & The Defender's Initiative Principal Researcher, Adrian Sanabria - and it promises expert opinions and takeaways to help audiences navigate the complex cybersecurity landscape.

This episode is based on the content of issue #35 of the newsletter and covers:

- Prolific cybercriminal group now targeting aviation and transportation Companies

- Patient's death linked to cyber attack on NHS, hospital trust says

- Cyberattack on Brazil tech provider affects reserve accounts of some financial institutions;

We’re thrilled to announce a special bonus episode of the Alice in Supply Chains podcast featuring an insightful conversation you won’t want to miss.

In this episode, Alexandre Sieira, CTO and Co-founder of Tenchi Security, and Adrian Sanabria, Principal Researcher at the Defender's Initiative, sit down with AJ Yawn - Director of GRC Engineering at Aquia, author of GRC Engineering for AWS, and host of CyberTakes.

Together, they take a deep dive into SOC 2 and its fate - exploring challenges, limitations, why it’s become so popular - and what the future holds. It’s a timely and important discussion for anyone interested in cyber risk management.

Alice in Supply Chains is a monthly podcast by ⁠⁠Tenchi Security ⁠⁠based on the ⁠⁠Alice in Supply Chains newsletter, ⁠⁠that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM).

It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder ⁠⁠Alexandre Sieira ⁠⁠& The Defender's Initiative Principal Researcher, ⁠⁠Adrian Sanaria⁠⁠, and it promises expert opinions and takeaways to help audiences navigate the complex cybersecurity landscape.

This episode is based on the content of issue #34 of the newsletter of the same name, and covers:

- Cyber attack on Rhode Island's benefit system

- Retail attacks in the UK and the US

- How to incentivize security by design

Alice in Supply Chains is a monthly podcast by ⁠Tenchi Security ⁠based on the ⁠Alice in Supply Chains newsletter, ⁠that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM).

It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder ⁠Alexandre Sieira ⁠& The Defender's Initiative Principal Researcher, ⁠Adrian Sanaria⁠, and it promises expert opinions and takeaways to help audiences navigate the complex cybersecurity landscape.

This episode is based on the content of issue #33, published on May 16th, 2025, and covers the following stories:

- EU businesses looking to ditch US Cloud Companies

- Insights from the UK ICO Investigation into the 2022 NHS Breach

- The great Hanoi rat massacre and modern risk practices

- JPMorgan's CISO open letter: a call to action