Supply chain attack

An attack on an organization through a supplier it trusts, such as a software vendor, an IT provider or an open-source package.