Sunburst was a sophisticated, malware supply chain attack that SolarWinds says inserted a vulnerability into software used by thousands of its customers. SolarWinds suspects the attack, which may have begun two years before its discovery, was conducted at the behest of another nation state but has not yet verified the source of the attack.