Glossary

Advanced Persistent Threat (APT)

What Is an Advanced Persistent Threat (APT)?

An Advanced Persistent Threat (APT) is a sophisticated, often state-sponsored adversary that conducts prolonged, targeted intrusions to achieve specific strategic objectives — characterized by patience, custom tooling, operational discipline, and the ability to maintain access for extended periods.

APTs increasingly target the software supply chain because it offers a way to compromise many high-value targets through a single upstream foothold. Recent attributions — including UNC1069 / BlueNoroff's role in the 2026 Axios compromise — illustrate how nation-state actors now treat open-source ecosystems as primary attack surfaces. Defending against APT activity in the software supply chain requires evidence-based trust decisions, not assumed safety based on package popularity.

Related Terms

Nation-State Threat Actor · Software Supply Chain Attack · Threat Intelligence · Backdoor

Threats & Supply Chain Attack PatternsBackdoorA backdoor is a hidden mechanism in software that allows unauthorized access while bypassing normal authentication — often inserted via a compromised build process.Read definition
Threats & Supply Chain Attack PatternsTyposquatting and Dependency ConfusionTyposquatting and dependency confusion are supply chain attack techniques that trick build systems into installing malicious packages with deceptive names.Read definition
Threats & Supply Chain Attack PatternsSoftware Supply Chain AttackA software supply chain attack compromises an organization indirectly by injecting malicious code into a trusted upstream component, dependency, or vendor.Read definition

Advanced Persistent Threat (APT)

What Is an Advanced Persistent Threat (APT)?

Related Terms

Related Content