Glossary

Supply Chain Attack

An attack that targets software dependencies, build tools, or CI/CD processes to compromise an application upstream of its distribution. Supply chain attacks (SolarWinds, xz-utils, event-stream) affect thousands of organizations simultaneously. Dependency verification and code signing are the primary defenses.

Related Pages

supply chain npm composer pip dependencies attack→dependency confusion→

Other Terms

2FA/MFA (Multi-Factor Authentication)

Account Takeover (ATO)

ADCS (Active Directory Certificate Services)

AES (Advanced Encryption Standard)

← Back to glossary

Want to know what your AI agent can do?

Tell us about your agent, its tools, and client context. We will come back with the right review scope.

Discuss your audit