Business & Technology
UK firms struggle to map supply chain cyber threats
More than eight in 10 UK cyber security and third-party risk professionals say their organisation experienced at least one supply chain cyber incident in the past year, highlighting continued gaps in supplier oversight and incident response.
Risk Ledger‘s research Every Link Matters: The State of Supply Chain Security 2026 – UK Edition found 82.4% of respondents recorded at least one supply chain incident in the previous 12 months. Almost half, at 47.2%, reported two or more. The findings suggest supply chain cyber risk remains a persistent issue for organisations across sectors, despite stronger regulatory scrutiny of operational resilience and supplier dependencies.
Risk levels
The survey of 500 UK cyber security and third-party risk management professionals found 86% ranked supply chain cyber incidents among their top three concerns for 2026.
The data also shows a gap between concern and readiness. Only 6% of respondents said they could accurately map exposure across their supplier ecosystem in under four hours after a major supply chain cyber incident. Another 45% said it would take between four and 24 hours.
More than a quarter said it would take one to three business days. A further 23% said it would take more than a week and require manual outreach to suppliers.
Those delays can limit an organisation’s ability to respond when a supplier is compromised. Teams need to know which business services, systems and processes may be exposed. They also need to understand whether risk extends deeper into the supply chain.
Slow checks
Supplier due diligence remains slow. Only 38% of respondents said their organisation could complete security due diligence for a new supplier within two weeks.
Another 34.6% said the process took three weeks or more. Within that group, 12% said it took more than one month.
Risk Ledger’s analysis points to a structural weakness in many third-party risk management processes. They often remain manual and focused on bilateral assessment between one customer and one supplier. Many still rely on bespoke questionnaires and periodic reviews.
That approach can create duplicated work for suppliers. It can also leave customers relying on information that may not reflect current security controls.
Visibility gap
Visibility beyond direct suppliers remains uneven.
Some 30% of respondents said they had full visibility into the entire chain of subcontractors contributing to important business functions. Just over half, at 50.2%, said they had high visibility into all direct subcontractors of critical third parties.
A further 16% reported only partial visibility into some fourth parties of their critical suppliers. Only 3% said they had no visibility beyond direct critical third parties.
The findings come as regulators in the UK and EU put greater emphasis on operational resilience, concentration risk and the mapping of digital dependencies. This includes closer scrutiny of subcontractors and deeper-tier relationships that support critical or important services.
“Identifying systemic risks is really important. However in most cases, only industry-level associations have enough combined resources and adequate information sharing guardrails in place to efficiently identify actual systemic risks, agree actions and, with the help of regulators, influence large players in the supply chain,” said Yohann Le Grand, Senior Security & Resilience GRC Manager, Lloyds Wealth.
Network mapping
Risk Ledger sets out a model it calls Active Supply Chain Security. It is based on standardised assessments, continuous monitoring, network visibility, collective defence and faster incident response.
The survey suggests organisations are open to more collaborative approaches. Some 42% of respondents said their organisation would be very supportive of an industry-wide model in which supplier intelligence and assurance data are shared with peers. A further 50.2% said they would be somewhat supportive.
Risk Ledger also examined three groups using its platform: 26 government organisations, 25 local authorities and 30 financial institutions.
Across the government group, the platform identified 3,240 direct third parties and 5,886 additional dependencies across shared nth parties. It also identified 1,264 potential concentration risks, including 820 at third-party level.
Of those third-party concentration risks, 224 were rated critical. Risk Ledger said this means an incident at one supplier would be likely to disrupt essential services at multiple public sector organisations.
“Risk Ledger’s Network Visualisation Tool has enabled us to efficiently identify critical risks across our supply chain, helping us address potential concentration risks before they escalate,” said Chris Phillips, Third-Party Compliance and Assurance Lead, Home Office Cyber Security (HOCS) | Governance, Risk and Compliance (GRC).
Sector exposure
The local authority group had 1,004 direct third parties and 7,659 additional dependencies across shared nth parties. Risk Ledger identified 1,240 potential concentration risks, including 364 at third-party level. Of those, 99 were rated critical.
The financial services group had 2,780 direct third parties and 6,529 additional dependencies. The platform identified 1,322 potential concentration risks, including 727 at third-party level. Of those, 288 were rated critical.
The analysis also found control weaknesses among some critical concentration risks. In the financial services group, 120 suppliers classified as critical third-party concentration risks did not have Cyber Essentials certification. Two were not using Multi-Factor Authentication to secure remote access to their network or cloud environments. Ten did not regularly test or rehearse Business Continuity and Disaster Recovery plans.
“A big challenge with third-party risk management comes down to how corporations and other organisations tackle peer-to-peer communication from within their respective siloes. We (as customers of common suppliers) need to get better at working with each other and trusting what our peers are doing. Using feedback as a form of intelligence about shared interests would allow companies to focus more time on fixing the things we really care about,” said Jay Vinda, Global CISO and Cyber Risk Engineering Lead, Mosaic Insurance.
Read full report here.
Bicester Leisure Centre has confirmed it will reopen fully on Monday, August 10, following several weeks of partial and complete closures.
However, the centre will remain fully closed tomorrow (Friday, August 7) with scheduled swimming lessons moved to Kidlington Leisure Centre.
While the changing rooms have been closed and the toilets moved to the car park, the gym, sports hall and outdoor pitches have remained in use during most of the works.
The main pool is due to welcome users again from Tuesday, August 11, marking a significant step towards normal service.
However, the Play ’n’ Teach pool will remain closed for a further three weeks while structural repairs to the roof are carried out.
Play ’n’ Teach sessions will be transferred to the main pool to minimise disruption with the majority of lesson times and days remaining unchanged, while a small number of Friday classes will operate on adjusted schedules.
The leisure centre said minor temporary changes would also be made to the main pool timetable over the coming weeks to ensure both lessons and public sessions can operate safely within the reduced space.
Operators added that they were working to provide additional public and lane swimming opportunities wherever possible during the period.
The reopening update follows growing concern among residents over the impact of the closure and ongoing restrictions.
Earlier this summer, councillors Sam Holland and Nick Mawer called for what they described as a fairer approach for members who have paid for facilities that have been unavailable during the works.
The pair say they are continuing to press Cherwell District Council over the support on offer to users.
In a joint update, they acknowledged that concessions remain available on request but argued residents should not be expected to chase compensation or fee reductions themselves when the disruption is long-running.
They said: “The current approach places too much of the burden on residents.”
The councillors have formally requested a meeting with relevant representatives at Cherwell District Council to discuss support for affected members and seek clearer communication on what assistance is available.
They added: “Residents deserve transparency, consistency and fairness while these works continue. We will continue to raise concerns on your behalf and will provide a further update once we have received a response regarding the meeting request.”
SOFIAH NICHOLE SALIVIO
News Editor
Woojer has launched a site-wide 15% discount on its haptic gaming and wellness products across several international markets.
The promotion covers the Woojer Vest 4, Woojer STRAP 4 and Woojer MAT, aimed at users of games, films, music and relaxation products. It applies across the full range rather than a single device category.
At the lower end of the price range, the STRAP 4 costs USD $143 and GBP £137 after the discount, down from USD $169 and GBP £162. The wearable device converts audio into physical vibration and can be worn around the hips, across the chest or in a cross-body position.
Woojer has also added a styling element, offering a range of colours, patterns and themed editions linked to Call of Duty: Black Ops 7 and Fortnite. A dedicated app for the Series 4 range lets users manage appearance settings, core functions, audio controls and firmware updates.
Higher-priced products
The Vest 4 sits in the middle of the range at USD $407 and GBP £390 after the discount, compared with USD $479 and GBP £459 previously. It uses six Osci TRX2 transducers to deliver haptic feedback across the torso while users play games, watch films, listen to music or use virtual reality applications.
According to the product details, the vest includes an integrated control panel, digital signal processing, multi-band equaliser settings, Bluetooth headset compatibility and up to eight hours of battery life. It is designed for use while seated, standing or moving.
The most expensive item in the promotion is the Woojer MAT, now priced at USD $849 and GBP £813, down from USD $999 and GBP £957. The foldable mattress topper is positioned as a home wellness product that turns sound into vibrations across the body.
Wellness push
Woojer links the MAT to vibroacoustic therapy, which combines sound and vibration in relaxation and recovery settings. The product is intended to support sleep, stress reduction, recovery, mindfulness and relief from muscular tension.
That places the MAT in a broader wellness market where consumer technology companies are trying to move beyond entertainment hardware into products associated with rest, recovery and mental wellbeing. By including the MAT in the same summer offer as its gaming wearables, Woojer presents entertainment and wellness as part of a single commercial strategy.
The promotion also highlights the company’s pricing structure. Even after the discount, the MAT remains a premium purchase at close to USD $850, while the Vest 4 still costs more than many mainstream audio accessories, suggesting Woojer is targeting consumers willing to pay more for a specialised sensory product.
At the same time, the STRAP 4 gives the company a lower entry point for buyers interested in haptic audio without spending several hundred pounds or dollars on a vest or mattress topper. That may help broaden its reach among gamers, music listeners and virtual reality users who want a wearable format rather than a larger home setup.
Beyond direct sales, Woojer also offers an affiliate programme that pays 10% commission on generated sales. This suggests the company is using partner-led marketing to widen distribution and attract attention in a crowded consumer electronics market.
Haptic technology has drawn increasing interest from gaming and immersive media companies seeking to add touch-based feedback to sound and visuals. Woojer’s product range reflects that trend, focusing on devices that translate audio signals into vibrations users can feel through a strap, vest or mattress topper.
The sale gives prospective buyers a temporary price cut across all three product categories, with discounted prices ranging from USD $143 for the STRAP 4 to USD $849 for the MAT.
The soaring prices come after the start of the Iran war in the end of February, with diesel now at 205.9p per litre at Membury services in Berkshire, and unleaded petrol reaching 185p per litre.
Some drivers are reducing their journeys due to the unaffordable fuel prices.
The Government has frozen fuel duty in an effort to alleviate the burden, while motoring groups advise shopping around for the best deals.
Simon Williams, head of policy at the RAC, commented on the situation: “Fuel prices continued to rise over the weekend with petrol climbing to a new Iran War high of 160.85p and diesel going back over 180p, something drivers haven’t seen since 9 June.
“Unleaded has now risen more than 10p a litre – 7 per cent – since bottoming out at 150.59p on 6 July while diesel is up 16p (15.8p) a litre, or 10 per cent, almost fully reversing June’s 16.6p reduction, which was the biggest monthly drop on record.
“Positively for petrol car drivers, RAC analysis of wholesale fuel data shows prices at the pump should begin to stabilise this week.
READ MORE: Oxford University Ebola vaccine trial gets only five volunteers
“But the news for those who rely on diesel, including many businesses, is worrying as it looks set to carry on rising, possibly reaching 185p in the next week or so.”
The rise in fuel prices coincides with the summer holiday season, when more than 20 million UK drivers are expected to hit the roads this week.
The AA is advising motorists to use price comparison apps powered by the Government’s Fuel Finder service to “beat the higher prices.”
The increase in prices has led to record numbers of forecourt drive-offs.
Forecourt Eye, a fuel theft prevention company, reported a 20 per cent increase in incidents of fuel taken without payment in the five months following the conflict’s onset on February 28, compared to the previous five months.
The surge in pump prices due to the war has driven the value of stolen fuel up by 48 per cent over the same period, reaching an estimated daily average of £194,000 across the UK’s 8,359 forecourts.
Gordon Balmer, executive director of the Petrol Retailers Association, noted that its members are “reporting increasing levels of abuse and aggression towards colleagues who are simply doing their jobs and have no influence over the price displayed on the forecourt”.
The Government has postponed its planned September 2026 increase to fuel duty until the end of the year due to rising pump prices.
Originally introduced by the Conservatives in 2022 following Russia’s invasion of Ukraine, the 5p reduction was set to end in September 2026.
-
Business & Technology3 weeks agoHSBC UK & Visa test AI shopping with live payments
-
Business & Technology4 weeks agoMouser warns against viral hacks to cool overheating phones
-
Business & Technology3 weeks agoValarian lands USD $50 million backing for sovereign AI
-
Business & Technology4 weeks agoKane tops England influencer rankings after Mexico win
-
Business & Technology4 weeks agoSNP & Palantir launch AI tools for SAP transformations
-
Oxford News4 weeks agoDWP now checking bank accounts for Universal Credit and Pension Credit
-
Oxford Events4 weeks agoHenley Festival 2026 highlights: Five nights of unforgettable performances and festival moments
-
Business & Technology4 weeks agoOde launches free AI voice service for poem recommendations