vendor threats