Report by Bitsight

Under the Surface: Uncovering Cyber Risk in the Global Supply Chain

7 FINDINGSPublished Mar 17, 2025
View Original Report →

Key Findings

ByteDance Group (TikTok's parent company) is connected to 35.4% of the U.S. market.

Chinese state-linked entitiesUS

Providers outperform consumers in four of six security standards – including DMARC, SPF, DKIM, and DNSSEC.

Security standardsDMARCSPFDKIMDNSSEC

Providers lag behind consumers in areas such as patch management, open ports, insecure systems, and botnet infections

Patch managementOpen portsBotnetSystem security

Technology providers use 2.5x more products than consumers.

Technology

Technology providers have 10x more internet-facing assets than consumers.

Internet-facingTechnology

One-third of the U.S. supply chain relies on software or services from companies formally designated by the Department of Defense as "Chinese Military Companies".

Chinese state-linked entitiesSupply chainUS

Two-thirds of the U.S. supply chain depends on companies with at least expected ties to Chinese state-linked entities.

Chinese state-linked entitiesSupply chainUS