We saw this most clearly with the attack that rocked Solarwinds and its customers in December 2020. Hackers, believed to be Russian, compromised the company's development systems and introduced security flaws directly into its software. Those then compromised hundreds of customer systems, including those of US government agencies. The attackers had been in these systems for months before someone spotted the problem.