https://thenextweb.com/security/2019/10/22/supply-chains-show-their-weaknesses-following-avast-and-nordvpn-attacks/

Antivirus solution provider Avast and VPN service NordVPN both disclosed data breaches caused by exposed credentials that granted attackers remote access to internal systems.

The twin developments come as supply chain attacks — compromising a third-party vendor with a connection to the true target — targeting security-related apps are becoming a common vector to install malware.