But many of today’s most impactful attacks aren’t on production systems. Instead, they target the software supply chain, the process you use to create and deliver software. The well-known SolarWinds attack threatened thousands of organizations, for example, while a bug in the widely used Apache Log4j 2 library affected millions.
Nobody wants to be the next high-profile victim of a software supply chain attack. To help you avoid this, we’ll walk through some of the most well-known and most damaging software supply chain attacks1 . We’ll also look at the key lessons learned from these attacks, focusing on three important actions you can take right now to protect your organization.