'Businesses must adopt zero-trust security to prevent supply chain attacks'