A (partial) history of software supply chain attacks

The widespread campaign of software supply chain hacks that were behind the attack on SolarWinds began in 2020, and unofficially elevated software supply chain security to the top echelon of cyber risks to both government and the private sector. Subsequent events, like the emergence of the Log4Shell vulnerability in the Log4j2 open source library, underscored that software supply chain risk is for real.

appsec & supply chain security attack attacks campaign cyber events government hacks history log4j2 log4shell log4shell vulnerability partial private private sector risks rsa conference 2022 sector security software software supply chain software supply chain attacks software supply chain security solarwinds supply supply chain supply chain attacks supply chain hacks supply chain security vulnerability