• AOMEI Backupper servers hijacked for minutes at a time to push backdoor
• Head of AI Security Roles Surge in Large Organizations
• Incomplete security patches show hackers where to look next
• Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
• Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
• Quarantined, but still on your calendar: The explosion of invite-based attacks
• AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
• Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
• Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
• Conduent Agrees to Pay $80m to Settle Data Breach Class Action
• OpenCode Breach Could Affect OpenAI, Anthropic and Google
• ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
• US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
• Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
• China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
• Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
• France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
• New Aoki Infostealer Targets AI Coding Assistant Credentials
• Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered configuration files on AOMEI’s own servers for just five to ten minutes at a time, then restored the originals. The tampered files belong to the software’s update and promotional pop-up mechanism, which periodically fetches instructions from AOMEI’s servers. The activity was observed on …