Supply-chain intelligence
Know which of your suppliers was listed last week.
Beyond The Headlines. Every Monday morning.
An outside-in read on supply-chain threat, built from sources we can observe without any
supplier's cooperation.
Or read the previous editions
Subscribe
Get it every Monday.
No charge. Unsubscribe in one click.
We will use your details to send you Weekly Intelligence and, occasionally, related
information about Averro. We do not sell your data.
Why it matters
Silence is not reassurance.
4.7%
had said anything within three days of being listed
26.5%
after seven days
73.5%
still nothing a week later
Measured across 234 organisations in issue 005, only 5 of 107 had surfaced within three days
of being listed. Your window to act runs for about a week, and it is the same week your
supplier is least likely to tell you.
In every issue
Six layers, one page at a time.
Who was listed
Every organisation named, with the daily rate.
Whether anyone found out
Disclosure split by age band.
Exposed before listing
Credentials split employee, customer, third party.
The route in
Group tradecraft against the controls that address it.
What crossed the line
Vulnerabilities confirmed exploited, with deadlines.
What to ask a supplier
Five questions, one per control layer.
How we work
Every figure is sourced.
- Built from outside. No supplier has to cooperate, and no client data ever appears in it.
- Where we interpret rather than measure, we say so. A listing is a publication, not a break-in.
- When our method is wrong, we publish the correction. We retired our own headline metric after finding the search behind it understated the result, and said so in the issue.
Archive
Read the previous editions.
Issues 001 to 004 were produced before we corrected how we measure public disclosure, so their
disclosure figures understate the result and should not be compared with later issues. The
correction is set out in issue 005.
004
10 to 16 August 2026
249 organisations listed by 44 groups
Read PDF
003
3 to 9 August 2026
226 organisations listed by 38 groups
Read PDF
002
27 July to 2 August 2026
202 organisations listed by 34 groups
Read PDF
001
20 to 24 July 2026
129 organisations listed by 28 groups, over a five day period
Read PDF
Cyb3r Operations