Story of the Year: global IT outages and supply chain attacks

This Kaspersky bulletin reviews major 2024 supply-chain and infrastructure incidents — including the CrowdStrike outage affecting millions, an XZ backdoor threatening SSH servers, the Polyfill.io JavaScript supply-chain compromise impacting hundreds of thousands of sites, Cisco Duo SMS log theft via a third-party breach, Fortinet and OpenSSH vulnerabilities with active exploitation potential, and various malware package injections — and discusses worst-case scenarios (AI provider failures, satellite and subsea cable risks, kernel exploits) and mitigation strategies to reduce systemic risk.