HACKERS BREACH ISP TO POISON SOFTWARE UPDATES WITH MALWARE

Summary from the TLDR InfoSec newsletter

A Chinese hacking group named StormBamboo compromised an ISP to inject malware into software updates by exploiting insecure update mechanisms.