AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
What Is a Software Supply Chain Attack?
Charles Gauss: I think there is a general confusion as to what a supply chain attack is. What happened with SolarWinds is a threat actor found a way to insert malicious code into a legitimate product that ended up getting shipped out to a variety of customers across the globe. Gao: Can a threat actor break into one company, perhaps a service provider, and get access to dozens or hundreds or thousands of other organizations because of the legitimate connectivity between that service provider and their thousand some out customers? Charles: Sure. That's kind of because of the ubiquity of SolarWinds and because of how prevalent the attack was.