Supply chain attacks usually hide behind legitimate processes to gain unrestricted access to an organization's software ecosystem. In most cases, attackers start by breaching the security defenses of a vendor or software supplier. Once the supply chain malware has been injected, it must attach itself to a legitimate digitally signed process. Software updates are often used by attackers to spread malware across the software supply chain. Some of the common types of software supply chain attacks include: Compromised software building tools, Stolen code-sign certificates or signed malicious apps using a stolen identity, and compromised code in hardware or firmware components.