Lessons of the SolarWinds attack
GZERO World with Ian Bremmer
00:00
What Is a Software Supply Chain Attack?
Charles Gauss: I think there is a general confusion as to what a supply chain attack is. What happened with SolarWinds is a threat actor found a way to insert malicious code into a legitimate product that ended up getting shipped out to a variety of customers across the globe. Gao: Can a threat actor break into one company, perhaps a service provider, and get access to dozens or hundreds or thousands of other organizations because of the legitimate connectivity between that service provider and their thousand some out customers? Charles: Sure. That's kind of because of the ubiquity of SolarWinds and because of how prevalent the attack was.
Transcript
Play full episode
