Navigating Third-Party Security Risks in 2023