Supply chain attacks are an obvious avenue for high-end attackers, where their direct targets are hardened, so I guess we'll see more of these going forward.

Whilst companies like Microsoft can likely afford to harden their software update systems well enough to deter this, I do wonder what impact it'll have if smaller software providers/open source software providers who can't afford high-end OpSec teams start getting targeted.

Realistically a lot of software auto-updates these days so it's a nice avenue for attackers to exploit...