supply chain attack
Upstream software sabotage
A supply chain attack compromises software or hardware by targeting a trusted vendor or component rather than the final target directly.
Attackers infiltrate a supplier's systems, then insert malicious code into legitimate updates or products that get distributed to thousands of downstream users: The SolarWinds breach was a classic supply chain attack—hackers poisoned software updates that companies installed themselves.
The method exploits the trust organizations place in their vendors.
- malwareHarmful computer programs
- backdoorHidden bypass mechanism
- zero dayUndiscovered security flaw
- compromisedMade vulnerable to harm
- vendorOne who sells goods
software · open source · infiltrate · upstream · dependency · breach · hackers · nation state · firmware · update · vulnerability · injection · trusted · third-party · trusted source · payload · network · exploit
supply chain attackdirect attack
Offensive without concealment
frontal assault · brute force attack · perimeter breach · phishing attack · social engineering
supply, chain, attack, supplies, supplied, supplying, supplier, suppliers, resupply