Also called value-chain or third-party attacks, while nothing new, they have come to the forefront of the industry following SolarWinds' December 2020 breach disclosure, which to date has affected nearly 18,000 public and private sector customers. Threat actors, believed to be Russia's Cozy Bear, compromised IT management software from SolarWinds, called Orion, and produced and distributed trojanized updates to the software's users. Unfortunately, it may take months before we more clearly understand the extent of the damage. What we do know already is that now, organizations of all sizes should not only be aware of their own security postures, but also aware of all entities in their supply chains, including not only vendors but also partners, to mitigate the risk of a cyber-attack.