Details are still emerging about the full scope and scale of the cyber-attack that targeted software vendor SolarWinds and compromised the systems of several of the largest U.S. public companies and government agencies, but the lessons it imparts on where vulnerabilities still lurk in the third-party vendor supply chain cannot be grasped soon enough.



