High-profile software provider compromises in the past few months show that threat actors are actively targeting the services underpinning corporate infrastructure. Heres what to do about it.