Alice in Supply Chains

This month, Adrian and Alexandre dig into a mix of vulnerability management fundamentals, supply chain security developments, and the accelerating push for European digital sovereignty. The episode opens with a reality check on AI-assisted hacking: despite the hype around tools like Anthropic's Mythos, the vulnerabilities actually causing damage are still the old, unpatched ones sitting on forgott...

In this special interview episode, Adrian and Alexandre sit down with Alex Pinto , lead author of the Verizon Data Breach Investigations Report, to walk through the 2026 edition before the broader industry has fully digested it. Pinto explains why the 2026 dataset, with 31,850 incidents and 22,624 confirmed breaches contributed by over 100 organizations in 145 countries — is the most statistically...

Episode #17 of the Alice in Supply Chains podcast, with co-hosts Alex Sieira (CTO & Co-founder, Tenchi Security ) and Adrian Sanabria (Principal Researcher, The Defenders Initiative), is now live! This month they dig into what happens when one breach detonates a chain of others, and why "we have a SOC 2 report " is no defense when the vendor underneath you gets popped. The featured c...

In this special bonus episode, Adrian and Alexandre are joined by John Hammond , one of cybersecurity’s most recognizable YouTube creators and Senior Principal Security Researcher at Huntress - a cybersecurity company dedicated to protecting businesses of all sizes against modern-day cybercrime - for a deep dive into software supply chain attacks using the recent Axios NPM compromise as a case stu...

In this April 2026 episode of Alice in Supply Chains, Adrian and Alexandre cover three stories that weren't on anyone's 2026 bingo card — and all of which land on the TPRM analyst's desk. AI in your third parties. Amazon's recent downtime, linked to engineers being mandated to use AI on production systems, raises a question most TPRM programs aren't equipped to answer: do you e...

Recorded April 1, 2026 — post-RSA 2026 edition Hosts Adrian Sanabria (The Defenders Initiative) and Alexandre Sieira (CTO and Cofounder, Tenchi Security ) reconvene — both recovering from the notorious con crud — to dig into the biggest stories from a packed month in third-party and supply chain security. This month, we have two main stories: The ongoing Delve controversy and data leaks Our RSAC C...

The Alice in Supply Chains Podcast is back for another episode! On it, Adrian Sanabria and Alexandre Sieira share their expert opinions on the most pressing matters in the TPCRM world -  as presented on issue #42 of our newsletter of the same name, also launched today! Here are our stories for this episode and their associated links: Cyber Risk at Scale: Safeguarding Portfolio Value in Private Equ...

In this special interview episode, hosts Adrian Sanabria and Alexandre Sieira sit down with Tony Martin-Vegue , author of the upcoming book Heatmaps to Histadograms: A Practical Guide to Cyber Risk Quantification . Tony shares his journey from IT and cryptography to becoming a leading voice in cyber risk quantification, including his six years building Netflix's risk quantification program fro...

Alice in Supply Chains is a monthly podcast by based on the Alice in Supply Chains newsletter - that provides interesting discussions and insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's Co-founder and CTO  Alexandre Sieira & The Defender's Initiative Principal Researcher,  Adrian Sanab...

Join  Alexandre Sieira (CTO & Cofounder,  Tenchi Security ) and  Adrian Sanabria  (Principal Researcher, The Defender's Initiative) as they unpack the most relevant stories from our latest Alice in Supply Chains newsletter (issue #40) - and discuss what they mean for third-party cyber risk management. Topics approached on the last podcast of 2025: - Trends in Supply Chain Attacks in genera...

Join Alexandre Sieira (CTO & Cofounder, Tenchi Security ) and Adrian Sanabria (Principal Researcher, The Defender's Initiative) as they unpack the most relevant stories from our latest Alice in Supply Chains newsletter (#39) - and discuss what they mean for third-party cyber risk management. In this episode, the duo dive into: Liability in the Age of AI: Who is truly accountable when AI &q...

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) celebrate the 3rd anniversary of the Alice in Supply Chains newsletter - the very starting point for this podcast. Together, they revisit key highlights from issue #37, unpacking the stories shaping today’s supply chain security landscape: -The Sale...

Alice in Supply Chains is a monthly podcast inspired by the Alice in Supply Chains newsletter, delivering sharp discussions and insights on all things related to third-party cyber risk management (TPCRM). Hosted by two of the industry’s leading voices - Alexandre Sieira , Co-founder & CTO of Tenchi Security , and Adrian Sanabria , Principal Researcher at The Defender’s Initiative - the show of...

Alice in Supply Chains is a monthly podcast by  Tenchi Security based on the  Alice in Supply Chains newsletter that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Alexandre Sieira , Tenchi Security's CTO and Co-Founder  & The Defender's Initiative Principal...

We’re thrilled to announce a special bonus episode of the Alice in Supply Chains podcast featuring an insightful conversation you won’t want to miss. In this episode, Alexandre Sieira , CTO and Co-founder of Tenchi Security , and Adrian Sanabria , Principal Researcher at the Defender's Initiative, sit down with AJ Yawn - Director of GRC Engineering at Aquia, author of GRC Engineering for AWS , and...

Alice in Supply Chains is a monthly podcast by  ⁠⁠Tenchi Security ⁠⁠ based on the ⁠⁠Alice in Supply Chains newsletter, ⁠⁠ that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder   ⁠⁠Alexandre Sieira ⁠⁠ & The Defender's Initiat...

Alice in Supply Chains is a monthly podcast by  ⁠Tenchi Security ⁠ based on the ⁠Alice in Supply Chains newsletter, ⁠ that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder   ⁠Alexandre Sieira ⁠ & The Defender's Initiative Pr...

Verizon’s 2025 Data Breach Investigations Report (DBIR) is out — and one of the top takeaways couldn’t be more clear: third-party risk is rapidly accelerating. This year, breaches involving third parties doubled compared to last year (from 15% to 30%), often driven by vulnerability exploitation and business disruptions. As the report puts it: when a vendor is hosting your data, the best strategy i...

Alice in Supply Chains is a monthly podcast by  Tenchi Security  based on the Alice in Supply Chains newsletter, that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder   Alexandre Sieira  & The Defender's Initiative Principal Researcher,...

Alice in Supply Chains is a monthly podcast by  Tenchi Security  based on the Alice in Supply Chains newsletter that provides interesting discussions and insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's CTO & Co-founder Alexandre Sieira  & The Defender's Initiative Principal Researc...

Alice in Supply Chains is a monthly podcast by  Tenchi Security  based on the Alice in Supply Chains newsletter that provides interesting discussions and insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's Co-founder and CTO  Alexandre Sieira  & The Defender's Initiative Principal Researcher,  Adrian...

Alice in Supply Chains is a monthly podcast by Tenchi Security based on the Alice in Supply Chains newsletter that provides interesting discussions and insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's Co-founder and CTO Alexandre Sieira & The Defender's Initiative Principal Researcher,...