SecurityThe Update Channel Is the New Perimeter: Three Supply-Chain Hijacks in Three Days
APT29's hijack of a widely embedded analytics script, a security vendor's own update channel used to root 2,950 servers, and a Chinese espionage group riding an input method's update traffic all point to the same conclusion: attackers have stopped breaching targets one at a time and started breaching the pipes that feed them.