Supply chain attacks are becoming more widespread, with cybercriminals infiltrating or compromising the least-secure aspects of a company’s increasingly broad digital ecosystem.