Third-party and supply-chain attacks — when a breach at a software vendor, MSP, or supplier becomes your problem — and how to manage the risk that runs through every company you rely on.