
Lessons of the SolarWinds attack
GZERO World with Ian Bremmer
00:00
What Is a Software Supply Chain Attack?
Charles Gauss: I think there is a general confusion as to what a supply chain attack is. What happened with SolarWinds is a threat actor found a way to insert malicious code into a legitimate product that ended up getting shipped out to a variety of customers across the globe. Gao: Can a threat actor break into one company, perhaps a service provider, and get access to dozens or hundreds or thousands of other organizations because of the legitimate connectivity between that service provider and their thousand some out customers? Charles: Sure. That's kind of because of the ubiquity of SolarWinds and because of how prevalent the attack was.
Transcript
Play full episode
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.