What went wrong with the 3CX software supply chain attack — and how it could have been prevented

Software supply chain attacks are happening all too frequently now, especially ones that occur due to the inclusion of malicious dependencies found in open source repositories. While this kind of supply chain attack is common, other forms of these attacks, such as targeted tampering incidents that impact the end user, are not as common, but carry a great impact as well. 

In late March, the cybersecurity community was rocked by one of these uncommon software supply chain attacks, in which …

3cx attack attacks code community cybersecurity cybersecurity community dependencies end end user forms great impact incidents inclusion malicious march open source repositories software software supply chain software supply chain attack software supply chain attacks supply supply chain supply chain attack supply chain attacks tampering uncommon