CISA, NIST Provide New Resource on Software Supply Chain Attacks

A software supply chain attack occurs when threat actors manage to compromise a vendor’s environment and poison their software, with the purpose of infiltrating the customers' systems.