Fundamental questions, like how the SolarWinds hackers got into its systems from the start, still aren't answered.

SolarWinds' Sudhakar Ramakrishna said his company is still investigating the scope of the attack.

Maybe lawmakers are getting more comfortable with the topic, or maybe they're just chasing headlines.

The lawmakers are hoping to crack open a cold case and learn from it before the next big supply-chain breach happens.

Congress and states are stepping up.

Someone with better resources and planning, and different motivations, could have carried out a significant digital breach.