The LASCON session abstract covers the 3CX software supply chain attack in which a VoIP vendor shipped malicious code to thousands of customers. Some affected customers later reported compromises inside their own environments. The abstract frames the incident as a case study for reducing software supply chain risk, but it does not provide malware, infrastructure, or attribution details.