No Organization Is an Island: How to Protect Against Supply Chain Attacks
To defend against supply chain attacks, organizations need to focus on all three layers of the attack surface: data, identities and infrastructure.
Every organization interacts with other organizations: suppliers, partners, customers, government agencies and more. As a result, you can suffer a breach even though your organization was not directly targeted. For example, adversaries were able to release the infamous NotPetya malware to thousands of companies worldwide by compromising the supplier of a popular accounting software solution. […]
