1. Why Was SolarWinds So Vulnerable to a Hack? February 2021. https://www.nytimes.com/2021/02/23/opinion/solarwinds-hack.html
2. The New York Times, Widely Used Software Company May Be Entry Point for Huge U.S. Hacking, 6 January 2021. https://www.nytimes.com/2021/01/06/us/politics/russia-cyber-hack.html
3. ITPro: SolarWinds blames intern for weak ‘solarwinds123’ password, 1 March 2021. https://www.itpro.com/security/cyber-attacks/358738/intern-blamed-for-weak-password-that-may-have-sparked-solarwinds
4. The GitHub Blog: Secure at every step: What is software supply chain security and why does it matter? https://github.blog/2020-09-02-secure-your-software-supply-chain-and-protect-against-supply-chain-threats-github-blog/
5. Torres-Arias, S., Afzali, H., Kuppusamy, T.K., Curtmola, R., Cappos, J.: In-Toto: providing farm-to-table guarantees for bits and bytes. In: Proceedings of the 28th USENIX Security Symposium, pp. 1393–1410. USENIX Association (2019)