yeah, we keep learning the same lesson: the tool that audits your supply chain is the single best target for compromising it