Security News > 2021 > July > Where does the SME fit into a supply chain attack?
Businesses have connections to other businesses, who supply them with goods, and whom they supply with goods - both parts and software.
In many cases, a company has its own supply chain while simultaneously being part of the supply chain for other, probably larger, businesses.
Every company has a duty to protect its customers from supply chain attacks while simultaneously taking action to prevent being a supply chain victim of its own suppliers.
The classic example of the possible scale of a software supply chain attack can be found in the 2020 SolarWinds hack in the U.S. Following an undetected breach at SolarWinds, attackers were able to surreptitiously add malware to its Orion software.
SMEs - like MEDoc and Inbenta - are frequently the target of supply chain attacks.
With supply chain attacks being a major growth area for cyber criminals, this is a worsening scenario, and the question is "What can the SME do to protect both itself and its customers?".
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/y2ayZRncoJQ/
Related news
- LottieFiles supply chain attack exposes users to malicious crypto wallet drainer (source)
- Blue Yonder ransomware attack disrupts grocery store supply chain (source)
- OpenWrt orders router firmware updates after supply chain attack scare (source)
- Update your OpenWrt router! Security issue made supply chain attack possible (source)
- Ultralytics Supply-Chain Attack (source)
- 390,000 WordPress accounts stolen from hackers in supply chain attack (source)
- Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack (source)