Securing the software supply chain is a “major source” of national security risk for both public and private-sector organizations, a new report from the Atlantic Council argues. […]