Supply-chain attack
Plain definition. A supply chain attack is an incident in which an attacker targets an organization by exploiting weak points in the network of suppliers and services it depends on.
Technical definition. NIST’s glossary defines a supply chain attack as “an incident where an adversary exploits vulnerabilities in the product or service supply network of the intended target.” Such attacks may be conducted at any point in a system lifecycle to exfiltrate or manipulate data, disrupt or manipulate system operations, or give an adversary the ability to access, disrupt or manipulate a system in the future. The supply network can be internal to the targeted organization, such as logistics services, or external, such as third-party product or service providers.
On this site
On this site, Supply-chain attack comes up in What happened with the D’CENT wallet hack, and am I affected?, Can a hardware wallet be hacked, and how do I verify one is genuine? and Which wallet is best for XRP, and how do I choose one without getting a fake or flawed one?.
Source
supply chain attack - Glossary | CSRC (csrc.nist.gov), read October 1, 2026.