Supply Chain Attack

A Cyberattack that targets trusted third-party vendors who offers services or software.

This attack is very costly because it affects multiple organizations at the same time.

Relates to multiple Security Domains (CISSP) such as, but not limited to, Security and Risk Management, Security Operations, and Security Architecture and Engineering.