[…] Financial supply chains are underpinned by third-party tech vendors providing software and infrastructure. J.P. Morgan Chase Chief Information Security Officer Patrick Opet said in an open letter last week that the banking giant’s software-as-a-service (SaaS) providers are vulnerable. Opet: “Inadequately secured authentication tokens vulnerable to theft and reuse; software providers gaining privileged access to customer systems without explicit consent or transparency; and opaque fourth-party vendor dependencies silently expanding this same risk upstream,” he said in the letter. The FDIC report elevated risks and increased incidents stemming from third- party relationships, as well as limited resources to pinpoint and help address those vulnerabilities, he said. …