Software supply chain attacks have increasingly made the headlines in recent years. They occur when attackers change the code in third-party software components in order to compromise the applications using them. These attacks can be used to steal data, corrupt systems or move laterally through networks. We spoke to Ansh Patnaik, chief product officer at CyCognito, to learn more about this type of attack and how to combat it. BN: Could you explain why software supply chain attacks have become such a prominent threat in recent years? AP: Absolutely. Software supply chain attacks have increasingly moved from the periphery of concerns to the forefront due to their sheer impact and the growing complexity of the software ecosystems. According to Verizon's 2024 Data Breach Investigations Report, there was a staggering 180 percent surge in breaches initiated by exploiting vulnerabilities compared to 2022.