Supply Chain Attack
A supply chain attack targets the software or hardware supply chain rather than the end victim directly. Attackers compromise a trusted supplier — a software library, build system, or hardware manufacturer — to inject malicious code that is then distributed to thousands of downstream users.
Frequently asked questions
What is Supply Chain Attack?
A supply chain attack targets the software or hardware supply chain rather than the end victim directly. Attackers compromise a trusted supplier — a software library, build system, or hardware manufacturer — to inject malicious code that is then distributed to thousands of downstream users.
How is Supply Chain Attack related to Malware?
Malware in short: Malware is any software designed to harm, exploit, or gain unauthorized access to a system. It includes viruses, worms, trojans, ransomware, spyware, adware, rootkits, and more. Detection relies on file hashes, behavioral signatures, and threat intelligence feeds.
Related terms
Malware
Malware is any software designed to harm, exploit, or gain unauthorized access to a system. It includes viruses, worms, trojans, ransomware, spyware, adware, rootkits, and more. Detection relies on file hashes, behavioral signatures, and threat intelligence feeds.
CVE (Common Vulnerabilities and Exposures)
CVE is a public catalogue of known cybersecurity vulnerabilities, maintained by MITRE and sponsored by CISA. Each entry has a unique CVE ID (e.g., CVE-2024-12345), a description, and references. CVE IDs are the universal language for tracking and patching specific vulnerabilities.
SBOM (Software Bill of Materials)
An SBOM is a formal inventory of all software components and dependencies in an application — similar to an ingredient list. SBOMs are used to rapidly identify which systems are affected when a vulnerability (like Log4Shell) is discovered in a common dependency.
Try it on a real indicator
Look up any IP, domain, URL or file hash in the indexed records.