Supply chain attacks

Supply chain attacks target software developers and suppliers with the goal of accessing source codes, building processes, or updating mechanisms. Explore how attackers exploit weaknesses to compromise trusted systems and distribute malicious code.

Refine Results

Filtered by

Clear All

supply-chain-attacks

Refine results

Sort By

Content Type

Topic

Threat intelligence

Products and services

Publish date

Start Date

End Date

Tailored AI insights from Microsoft Security Copilot

Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.

Learn more
March 23, 2020 6 min read

Latest Astaroth living-off-the-land attacks are even more invisible but not less observable

Astaroth is back sporting significant changes. The updated attack chain maintains Astaroth’s complex, multi-component nature and continues its pattern of detection evasion.
March 11, 2020 5 min read

Guarding against supply chain attacks—Part 3: How software becomes compromised

Set a high standard of software assurance with internal teams, partners, and suppliers to reduce your risk of a software supply chain attack.
February 18, 2020 3 min read

Defending the power grid against supply chain attacks—Part 1: The risk defined

The “Defending the power grid against supply chain attacks” blog series analyzes how supply chain attacks are conducted and the steps utilities, device manufacturers, and software providers can take to better secure critical infrastructure.
February 4, 2020 5 min read

Ghost in the shell: Investigating web shell attacks

Web shell attacks allow adversaries to run commands and steal data from an Internet-facing server or use the server as launch pad for further attacks against the affected organization.
Go beyond data protection with Microsoft Purview

Govern, protect, and manage all of your data with Microsoft Purview, comprehensive solutions to help give you better visibility and control.

Learn more
February 3, 2020 4 min read

Guarding against supply chain attacks—Part 2: Hardware risks

Part 2 examines the hardware supply chain, its vulnerabilities, how you can protect yourself, and Microsoft’s role in reducing hardware-based attacks.
October 16, 2019 5 min read

Guarding against supply chain attacks—Part 1: The big picture

Paying attention to every link in your supply chain is vital to protect your assets from supply chain attacks.
July 26, 2018 11 min read

Attack inception: Compromised supply chain within a supply chain poses new risks

A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case.
March 22, 2017 3 min read

A new best practice to protect technology supply chain integrity

The success of digital transformation ultimately relies on trust in the security and integrity of information and communications technology (ICT).

Supply chain attacks

Filtered by

Refine results

Tailored AI insights from Microsoft Security Copilot

Go beyond data protection with Microsoft Purview

Get started with Microsoft Security