Defending Against Supply Chain Attacks

This report reviews the rising prevalence and complexity of supply chain attacks, summarizing major recent incidents—SolarWinds (SUNBURST/APT29), Microsoft Exchange zero-day intrusions attributed to HAFNIUM, and the REvil-driven Kaseya VSA ransomware compromise—and recommends adopting Cyber Supply Chain Risk Management (C-SCRM), supplier visibility, and enhanced detection capabilities.