Another Brilliant Third-Party Gift

Here we go again with the joys of software supply chains, as current and former staff at Toronto's Hospital for Sick Children find their personal details exposed through a third-party app's security hole. At least clinical systems survived this round of vendor roulette. We keep telling everyone that vetting and diligently patching external vendor applications might prevent these tedious incidents, but clearly ignoring third-party vulnerabilities remains the preferred corporate strategy.