Met Police suspends use of phone-hacking software over Russian links

The Met Police’s pause on Oxygen Forensics highlights a growing enterprise risk: software vendors can present as one jurisdiction while being developed, controlled, or supported from another, creating supply-chain, sanctions, compliance, and trust exposure. For CIOs and technology leaders, this is a reminder to tighten third-party due diligence, confirm software provenance and ownership, and ensure critical tools—especially those used for sensitive investigations or regulated data—have documented alternatives and exit plans.