Hackers are sneaky. A supply chain attack is like targeting a bakery's flour supplier instead of the bakery itself. By hacking the supplier, they might be able to tamper with the ingredients or gain access to information about the bakery's customers.
