skip to main content
Travelers Logo
  • About
  • Careers
  • Agents
  • Investors
  • Sustainability
  • Contact Us

Register now
Problems logging in?
  • For Individuals
    • Overview
    • Products
      • Car
      • Home
      • Renters
      • Condo
      • Landlord
      • Boat & Yacht
      • Travel
      • Pet
      • Weddings
      • Umbrella
      • All Products
    • Prepare & Prevent
      • Insurance 101
      • Home Central
      • Travelers Garage
      • Managing Through COVID-19
    • Affinity Group Discount
    • Online Service
    • Pay Your Bill
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • For Business
    • Overview
    • Products & Solutions
      • Overview
      • Boiler & Machinery
      • Commercial Auto & Trucking
      • Cyber
      • Environmental Liability
      • Excess Casualty & Umbrella
      • General Liability
      • Global Insurance
      • Inland Marine
      • Management & Professional Liability
      • National Programs
      • Ocean Marine
      • Property
      • Small Business Owner's Policy
      • Surety Bonds
      • Workers Compensation
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Industries
      • Overview
      • Agribusiness
      • Architects, Engineers & Surveyors
      • Auto & Truck Dealers
      • Business & Professional Services
      • Construction
      • Education
      • Energy & Renewable
      • Equipment Dealers
      • Financial Institutions
      • Food Services
      • Health & Related Services
      • Hospitality & Recreation
      • Manufacturing
      • Marine Industries
      • Museums & Fine Art
      • Non-Profit
      • Oil & Gas
      • Public Entities
      • Real Estate
      • Retail
      • Technology
      • Transportation
      • Wholesale & Distribution
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Services
      • Overview
      • Risk Control
      • Claim
      • Premium Audit
      • Online Customer Tools
      • Risk Management Information Services
      • Travelers Client Advantage
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Small Business
      • Overview
      • Automobile Insurance
      • Business Owner's Policy
      • Data Breach
      • Employment Practices Liability
      • Professional Insurance
      • Umbrella Insurance
      • Workers Compensation Inurance
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Large Business
      • Overview
      • Casualty
      • Cyber
      • Management & Professional Liability
      • Property
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Multinational Business
    • Prepare & Prevent
      • By Topic
      • By Industry
      • Navigating Your Business Through COVID-19
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Claim Center
    • Claim Center
    • Should I File a Claim?
    • Report a Claim
    • Roadside Assistance
    • Find a Service Provider
    • Check Your Claim Status
    • Manage Your Claim Experience
      • Claim Reporting Next Steps
      • Claim Guide Library
      • Workers Compensation Resources
    • Claim Capabilities
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Prepare & Prevent
    • For Individuals
    • Home Central
      • Buying & Selling
      • Home Maintenance
      • Home Renovation
      • Home Safety
      • Moving
      • Smart Home
    • Travelers Garage
      • Buying & Selling
      • Car Maintenance
      • Distracted Driving
      • Safe Driving
      • Teen Driving
      • Boating
    • Insurance 101
    • Weather
    • For Business
    • Industries
      • Construction
      • Manufacturing
      • Nonprofit
      • Small Business
      • Technology
    • Topics
      • Business Continuity
      • Cyber
      • Driver and Fleet Safety
      • Facilities Management
      • Internet of Things
      • Product and Services Liability
      • Supply Chain Management
      • Workplace Safety
    • Travelers Risk Index
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • About Travelers
    • Overview
      • Awards & Recognition
      • Careers
      • Community
      • Diversity & Inclusion
      • Sustainability
      • History
      • Investors
      • Media Resources
      • News
      • Travelers Championship
      • Travelers Institute
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
    • Get a Quote
    • Find an Agent
    • Report a Claim
    • Pay Your Bill
Main Navigation
  • For Individuals
      • Insurance for Individuals
      • Products
        • Car
        • Home
        • Renters
        • Condo
        • Landlord
        • Boat & Yacht
        • Travel
        • Pet
        • Weddings & Events
        • Umbrella
        • More
      • Prepare & Prevent
        • Insurance 101
        • Home Central
        • Travelers Garage
      • Affinity Group Discount
      • Online Service
      • Pay Your Bill
    • Get a home quote now

      It's easy to get a free quote for home insurance from Travelers in just a few minutes.

       

      Get a home quote now
  • For Business
      • Products & Solutions
        • Commercial Auto & Trucking
        • Cyber
        • General Liability
        • Management & Professional Liability
        • Property
        • Small Business Owner's Policy
        • Surety Bonds
        • Workers Compensation
        • More
      • Industries
        • Construction
        • Energy & Renewable
        • Financial Institutions
        • Healthcare
        • Manufacturing
        • Real Estate
        • Technology
        • Transportation
        • More
      • Prepare & Prevent
      • Services
        • Risk Control
        • Claim
        • Premium Audit
        • More
      • Pay Your Bill
      • Small Business
      • Large Business
      • Multinational Business
      • For Business Overview
    • Tips for Managing Risks Related to a Remote Workforce

      Tips for Managing Risks Related to a Remote Workforce

      With the current reality of more employees working from home through the pandemic, is your business ready for all the implications?

      Learn more
  • Claim Center
      • Claim Center
      • Should I File a Claim?
      • Report a Claim
      • Roadside Assistance
      • Find a Service Provider
      • Check Your Claim Status
      • Manage Your Claim Experience
        • Claim Reporting Next Steps
        • Claim Guide Library
        • Workers Compensation Resources
      • Claim Capabilities
    • Send us your receipts, photos, invoices and more with just a push of a button.

      Securely share information with your Claim team.

      Send us your receipts, photos, invoices and more with just a push of a button.

      Upload a File
  • Prepare & Prevent
      • For Individuals
      • Home Central
        • Buying & Selling
        • Home Maintenance
        • Home Renovation
        • Home Safety
        • Moving
        • Smart Home
      • Travelers Garage
        • Buying & Selling
        • Car Maintenance
        • Distracted Driving
        • Safe Driving
        • Teen Driving
        • Boating
      • Insurance 101
      • Weather
      • For Business
      • Industries
        • Construction
        • Energy
        • Manufacturing
        • Nonprofit
        • Small Business
        • Technology
      • Topics
        • Business Continuity
        • Cyber
        • Driver and Fleet Safety
        • Facilities Management
        • Internet of Things
        • Product and Services Liability
        • Supply Chain Management
        • Workplace Safety
      • Travelers Risk Index
    • Managing Through COVID-19

      Managing Through COVID-19

      Resources to help you adapt to the realities of COVID-19.

      Learn more

Is Your Software Supply Chain at Risk of Cyber Crime?

person checking software updates for cyber crime person checking software updates for cyber crime

If your business operations rely on computers, you may be at risk of cyber crime through the software programs that you rely on. The latest Internet Threat Security Report from Symantec™, a global cybersecurity solutions leader, indicates that software supply chain vulnerabilities have become a big target and that the trend is likely to continue.

There was at least one large software update supply chain attack reported every month in 2017. That was a dramatic jump from an average of three per year from 2013 to 2016.

The typical attack scenario involves an attacker replacing a legitimate software update with a malicious version, which can be distributed quickly and covertly to intended targets. The computer of any user applying the software update can automatically become infected, consequently giving the attacker a hold on that network.

There are a handful of methods by which cyber criminals are conducting software update supply chain attacks. Here are the common attack methods noted by Symantec:

  1. Compromising the software supplier directly. This is the most straightforward attack path. In this method, an attacker switches the update package with a modified malicious version. This may be achieved through a successful spear phishing attack against a developer, or by using any other common attack vector, such as infected websites or credential theft.
  2. Hijacking Domain Name Servers, domains, IP routing or network traffic. Instead of compromising the software supplier directly, attackers can also compromise the communication path used to distribute the update. For example, visitors to a domain can be redirected to the attacker’s server, through DNS hijacking or similar “man-in-the-middle” techniques. Or it could be as simple as a lapsed domain being grabbed up by an attacker, who then registers it and uses it to control data sent back to the domain’s visitors.
  3. Hijacking third-party hosting services. Some software vendors use cloud-based platforms to distribute updates. Once attackers are able to steal the login credentials used by a developer, it can be an easy next step to upload infected binaries that will be downloaded and installed by unwary IT support teams.
  4. Other supply chain attack methods. There are other ways that your supply chain can be abused. For example, vendors who are given network access to maintain a software system or other IT asset may act maliciously, or may become a conduit through which attackers obtain unauthorized access. In addition, supply chain attacks can also be conducted against hardware, not just software. When a computer or other device is infected before it is even installed, the resulting compromise can be extremely difficult to detect.

To help protect your software supply chain, you can:

  • Test new software updates, even seemingly legitimate ones, in a test environment first in order to detect any suspicious behavior.
  • Monitor the behavior of all activity on your network to help identify any unwanted patterns and allow you to block a suspicious application before any damage can be done.

Given the increase in software supply chain attacks in 2017 and the success of a number of campaigns, Symantec suggests that it’s likely that attackers will continue to leverage this attack method.

The figures and statistics referenced herein are contained in the Symantec™ Internet Security Threat Report, Volume 23, 2018. For more insights on the digital security threat landscape, you can read the full report at https://www.symantec.com/security-center/threat-report, then visit travelers.com/cyber.

Learn More About Pre-Breach Services Through Symantec & Travelers

More Prepare & Prevent

cyber criminal looking at company information on laptop

5 Types of Cyber Criminals and How to Protect Against Them [Video]

Understanding the types of cyber criminals and their techniques can help protect your organization from a data breach.

virus downloaded on mobile phone

5 New Cyber Threats: Prepare to Defend Your Business

Digital security threats continue to come from new and surprising sources. Here are five trends that Travelers is watching.

Person checking laptop for ransomware

What Is the Current Ransomware Landscape? [Video & Infographic]

Ransomware is the fastest growing malware threat, targeting users of all types. View this infographic to learn more.

Top Stories
Cyber Risks and Your Business Video

Cyber Risks and Your Business [Video]

Pre- and post-breach services can mean the difference in whether or not a business recovers. Travelers can help.

  • Watch the video

Related Content

  • How's Your Cyber Knowledge? Take the Quiz to Find Out
  • How Pre-Breach Planning Can Help Protect Your Company
  • The Dark Side of the Internet [Video]

Related Products & Services

Travelers Pre-Breach Services provided by Symantec™

Better together when it comes to cyber protection.


CyberRisk for Multiple Industries and Business Sizes

Broad cyber liability coverage customized to fit the needs of small businesses to Fortune 500 companies and every organization in between.


View More Cyber Insurance Options


Find an Agent

Need an Agent?

Get the personal service and attention that an agent provides.

Find a local agent in your area:


See All Cyber Content


Travelers logo

Travelers and The Travelers Umbrella are registered trademarks of The Travelers Indemnity Company in the U.S. and other countries.
© 2021 The Travelers Indemnity Company. All rights reserved.

  • Travelers on Facebook
  • Travelers on YouTube
  • Travelers on Twitter
  • Travelers on LinkedIn
  • Travelers on Instagram

Products & Services

  • For Individuals
  • For Businesses
  • Claim Services
  • Prepare & Prevent

Our Company

  • About Travelers
  • Careers
  • Investors
  • Sustainability

Connect

  • Customer Support
  • MyTravelers®
  • For Agents
  • Find an Agent

Legal & Compliance

  • Terms of Service
  • Privacy & Security
  • Accessibility
  • Producer Compensation Disclosure