An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

The supply-chain attack against 3CX last month was caused by an earlier supply-chain compromise of a different software firm — Trading Technologies — according to Mandiant, whose consulting crew was hired by 3CX to help the VoIP biz investigate the intrusion. For those who missed it, someone was able to tamper with 3CX's …

[Pascal Monett]

The "supply-chain attack"

It wouldn't be so effectve if programmers stopped downloading code to production servers without any good reason.

Saving bandwidth is less important than ensuring security. And if you think that getting the latest updates is worth compromising security, I'm sure nork hackers have you on their Employee of the Month portraits.

[Ochib]

Re: The "supply-chain attack"

It wouldn't be so effective if programmers stopped downloading random software to their corporate PCs