Cyber supply chain security is the identification of risks involving vendors, suppliers, partners and other related entities which can impact the security of your organization or products. Even though recent national and international news headlines have brought the topic to the forefront, this evolving threat landscape has been simmering for years and remains largely unaddressed. We will present some of our findings from years in the field and discover the nexus of pragmatic threat intelligence, supply chain security and vendor risk management. Blind faith is no longer an option.