2min chapter

GZERO World with Ian Bremmer cover image

Lessons of the SolarWinds attack

GZERO World with Ian Bremmer

CHAPTER

What Is a Software Supply Chain Attack?

Charles Gauss: I think there is a general confusion as to what a supply chain attack is. What happened with SolarWinds is a threat actor found a way to insert malicious code into a legitimate product that ended up getting shipped out to a variety of customers across the globe. Gao: Can a threat actor break into one company, perhaps a service provider, and get access to dozens or hundreds or thousands of other organizations because of the legitimate connectivity between that service provider and their thousand some out customers? Charles: Sure. That's kind of because of the ubiquity of SolarWinds and because of how prevalent the attack was.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode