Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains
2026-07-21T19:24:05Z•6b038f5d8264ad221d8ccf10d9a1099c2ddb28ac7f2d17ed33fc91e13f30d636
AI-modelsC2CVE-2026-6875Cisco-AntaresHollowGraphMicrosoft-365Oracle-EBSSBOMServiceNowaccess-controlcalendar-abusecode-securitydata-breachdefense-contractorsexecutive-orderexploitation-in-the-wildremote-code-executionsocial-engineeringsoftware-dependenciessupply-chain-riskthird-party-riskzero-day
What happened
A SecurityWeek digest covering multiple high-impact stories: a new U.S. executive order requires defense contractors to map software dependencies, suppliers, foreign ownership and cyber-related supplier risks across critical supply chains; widespread reports of exploitation of a ServiceNow AI platform vulnerability (CVE-2026-6875) enabling remote code execution; a new HollowGraph malware campaign abusing Microsoft 365 calendars for two-way C2; Estée Lauder confirming data exfiltration via an Oracle E-Business Suite zero-day; and several data- and access-related incidents (Clover Health breach,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 6b038f5d8264ad221d8ccf10d9a1099c2ddb28ac7f2d17ed33fc91e13f30d636
- Enrichment time
- 2026-07-21T19:24:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.