Supply chain crisis is shocker of year.

Experts have declared a supply chain security crisis because vulnerabilities are popping up faster than we can pretend to patch them. This depressing state of affairs affects every single IT department struggling to maintain a shred of sanity. If we want any hope of protecting our estates from this invisible deluge of third-party bugs, we should probably start by auditing our software dependencies instead of downloading random packages and hoping for the absolute best.