A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers briefly altered server configurations between April and July 2026, then restored legitimate content before conventional security checks could reliably capture the compromise. ManageEngine’s... Weiterlesen: Google Uncovers Hackers Hijacking Legitimate Software Updates to Depl…
Intelligence View
⚡ tsecurity.de Intelligence
Google Uncovers Hackers Hijacking Legitimate Software Updates to Deploy Hidden Backdoors
A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers b…
IT Security Nachrichten GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
14 Quellen
Security: Denial of Service in ags (Fedora)
13 weitere Quellen
PPro-Linuxvor 2 Std.Security: Denial of Service in mingw-qt6-qt5compat (Fedora) VVulDB Updatesvor 3 Std.CVE-2026-121386 | FreeRDP up to 3.32.1 WinPR denial of service (Nessus ID 375599) PPro-Linux Securityvor 2 Std.Denial of Service in mingw-qt6-qt5compat (Fedora) PPro-Linux Securityvor 2 Std.Denial of Service in ags (Fedora) VVulDB Updatesvor 6 Std.CVE-2022-48492 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51188) VVulDB Updatesvor 6 Std.CVE-2022-48493 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51189)
+7
13 Quellen
CVE-2026-99257 | Linux Kernel up to 7.2.12 Gpio Shared null pointer dereference (Nessus ID 375602)
12 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-99255 | Linux Kernel up to 7.2.13 io-wq io_uring_cancel_generic cur_work race condition (Nessus ID 375597) VVulDB Updatesvor 2 Std.CVE-2026-99260 | Linux Kernel up to 7.2.12 ntfs ntfs_new_attr_flags behavioral workflow (Nessus ID 375596) VVulDB Updatesvor 2 Std.CVE-2026-99244 | Linux Kernel up to 7.3.0 pid_namespace zap_pid_ns_processes race condition (Nessus ID 375592) VVulDB Updatesvor 8 Std.CVE-2024-36978 | Linux Kernel up to 6.10-rc2 sch_multiq multiq_tune out-of-bounds write (affc18fdc694 / Nessus ID 207802) VVulDB Updatesvor 6 Std.CVE-2026-64312 | Linux Kernel up to 7.1.3 pcrypt pcrypt_aead_done improper synchronization (Nessus ID 375470) VVulDB Updatesvor 6 Std.CVE-2026-74684 | Linux Kernel up to 6.18.44/7.1.8 tap tap_get_user_xdp null pointer dereference (Nessus ID 375470)
+6
10 Quellen
PikaPods: Host Any Open-Source Apps Without a VPS Server
9 weitere Quellen
ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Securityvor 1 Std.Ghostunnel: Open-source TLS proxy with mutual authentication ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think DDEV Communityvor 3 Std.How I Vet an Open-Source Dependency Before Betting On It
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4283824/it-security-nachrichten/google-uncovers-hackers-hijacking-legitimate-software-updates-to-deploy-hidden-backdoors/