The rise of malware in the software supply chain – and what to do about it

The fast-evolving story of the compromise of voice over IP (VoIP) provider 3CX has refocused attention on the threat that software supply chain compromises pose. State-sponsored hackers tampered with 3CX’s desktop client, compromising the company’s Windows and macOS build environments, and added a backdoor to the desktop client’s code. The update was then signed and pushed to customers. 

The post The rise of malware in the software supply chain – and what to do about it appeared first on Security …

3cx attention backdoor build client code compromise customers desktop environments fast hackers macos malware rsac2023 s code security security boulevard software software supply chain software supply chain security sponsored state story supply supply chain the company threat update voice voip windows