What measures can organizations take to protect themselves against supply chain attacks, such as the spinok malware incident?

Source: https://www.cshub.com/attacks/articles/the-top-five-cyber-security-incidents-in-june-2023

• A cyber attack on document transfer service MOVEit led to a series of data breaches of high-profile companies including PricewaterhouseCooper (PwC), Ernst and Young (EY), Health Service Ireland and payroll provider Zellis.
• US Cybersecurity and Infrastructure Security Agency (CISA) urged all companies that used MOVEit to analyze their networks and download and install the software patch released by MOVEit to solve the vulnerability.
• Payroll provider Zellis stated that a “small number” of its customers had suffered subsequent data breaches as a result of the MOVEit cyber attack.
• Accounting firm PwC, British watchdog Ofcom and Health Service Ireland were also impacted by the cyber security incident.
• Ransomware gang Clop attempted to exploit its victims, posting company information including names, addresses and websites to its darknet site.
• Android apps that had been downloaded more than 30 million times were discovered to have been infected with SpinOk malware.
• Distributed-denial-of-service (DDoS) attacks were used against the Swiss government to force its government sites offline ahead of a video address by Ukranian President, Volodymyr Zelensky, on June 15.
• Pro-Russia hacking group, NoName, claimed responsibility for the DDoS attack to “thank Swiss Russophobes” for taking on another EU sanctions package against Moscow.
• Ransom