Supply chain attacks piggyback legitimate processes to gain uninhibited access into a business's ecosystem. This attack begins with infiltrating a vendor's security defences. This process is usually much simpler than attacking a victim directly due to the unfortunate myopic cybersecurity practices of many vendors.26 May 2021 https://www.wired.com/story/hacker-lexicon-what-is-a-supply-chain-attack/#:~:text=That%20insidious%20and%20increasingly%20common,piece%20of%20software%20or%20hardware.
https://resources.infosecinstitute.com/topic/cloud-computing-attacks-vectors-and-counter-measures/