The private sector’s risk from software supply chain compromises continues to grow. Feature-rich software is enlarging the potential attack surface| Atlantic Council