A supply chain attack (or third-party attack) is a threat that targets suppliers instead of directly attacking specific companies.
This makes detection and protection more difficult, especially in cases where suppliers do not adhere to strict IT security criteria.