What is a supply chain attack?

A supply chain attack reaches you through someone you trust: a software vendor whose update is tampered with, an IT service provider whose remote-management tool is abused, a supplier with VPN access to your network, or a hacked partner whose e-mail is used to send you malicious invoices. It works because the access or the software is legitimate, so it passes the checks you apply to strangers. Defences are knowing which suppliers have access to what, giving each the least access it needs and its own accounts with multi-factor authentication (MFA), disabling access when it is not in use, and asking about their security in contracts. NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. lists supply chain security among the cybersecurity risk-management measures in Article 21. NetSenX cannot see a tampered update being built; it sees what the supplier's access or software then does on your network, such as beaconing or new sessions.

← All 69 questions on Attack techniques explainedAll topics