The year of the supply chain attacks