SolarWinds (2020)

The 2020 SolarWinds attack compromised 18,000 organizations, including the US Treasury and Microsoft, through malicious code inserted into Orion software updates by Russian intelligence agency SVR. The supply-chain attack — active for nine months — was called by Microsoft President Brad Smith "the most sophisticated cyberattack ever conducted." It set a new standard for sophistication in state-sponsored cyberattacks.