Password spraying is a type of brute-force attack in which a malicious actor uses a single password against targeted user accounts before moving on to attempt a second password, and so on. This technique allows the actor to remain undetected by avoiding rapid or frequent account lockouts. https://us-cert.cisa.gov/ncas/current-activity/2019/08/08/acsc-releases-advisory-password-spraying-attacks#:~:text=Password%20spraying%20is%20a%20type,rapid%20or%20frequent%20account%20lockouts.

Supply chain attacks piggyback legitimate processes to gain uninhibited access into a business's ecosystem. This attack begins with infiltrating a vendor's security defences. This process is usually much simpler than attacking a victim directly due to the unfortunate myopic cybersecurity practices of many vendors.26 May 2021 https://www.wired.com/story/hacker-lexicon-what-is-a-supply-chain-attack/#:~:text=That%20insidious%20and%20increasingly%20common,piece%20of%20software%20or%20hardware.
https://resources.infosecinstitute.com/topic/cloud-computing-attacks-vectors-and-counter-measures/