Supply Chain Attack
Category: Infrastructure“su-PLY CHAYN uh-TAK”
Getting into a company by compromising something it depends on — a vendor, a plugin, or a piece of borrowed code.
Lesson #9: Securing AI Agents: Cybersecurity Essentials →Tampering with the lumber delivery instead of breaking into the job site.
A phone app update that quietly adds spyware because the developer's account was hijacked.
A malicious plugin added to the estimating tool skims customer data from every bid.
An AI agent installs a package that looks legitimate but sends every API key it finds to an attacker.
Modern software is mostly other people's code, so your security is only as good as what you install.
A supply chain attack compromises a vendor or dependency to reach you.
List the plugins and integrations connected to your main business tool. Remove any nobody can name an owner for.
Hover or focus a choice to preview the new review date.
Exercises by category
- Agents0/21 · 0%
- Models0/10 · 0%
- Data0/11 · 0%
- Infrastructure0/22 · 0%
- Fundamentals0/15 · 0%
- NobleHub0/20 · 0%
Next badge: First Nail — 1 more exercise
Related terms
Picked automatically from the same category and the ideas this term shares.
Hand-picked pair
An add-on you install to give a program a new ability it did not ship with, without changing the program itself.
Hand-picked pair
A tamper-resistant record of who did what, when, and to which record — including actions taken by an AI.
Hand-picked pair
A secret string of characters that proves which account is making a request, so a service knows who to trust and bill.
Same category: Infrastructure
A ready-made bundle of code, tools, and instructions that makes it much faster to build on top of somebody else's system.
Same category: Infrastructure
Running code or an AI in a walled-off space where it can work freely but cannot reach anything important if it goes wrong.
Same category: Infrastructure
A security approach where every request is verified every time, even from inside your own network or from your own AI.
See it in Python
Truth Code: Python lessons that use this idea in real code.