Hackers Hijacked Software Updates for Just 5 Minutes — How Did They Get Away With It? Cybersecur

Hackers hijacked legitimate software updates for as little as FIVE MINUTES — then restored the original files. How could such a brief attack leave computers compromised? In this episode of Cybersecurity Today, we investigate the AOMEI Backupper software supply-chain attack uncovered by Google Threat Intelligence Group and Mandiant. Researchers identified malicious update activity linked to a threat cluster known as UNC7017, with affected organizations identified in the United States, India, Pakistan, and other countries. You'll discover: - How trusted software update instructions were manipulated - Why five-minute attack windows could evade traditional investigations - How CROSSROAD and SHINYROAD malware established persistent access - What the incident means for businesses, IT teams, and cybersecurity professionals - Four practical defensive actions organizations can take PLUS: An important update on the ConnectWise Cloud Backup / Microsoft 365 incident. **Research and reporting:** Google Threat Intelligence Group / Mandiant: https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering ManageEngine Threat Analysis Lab: https://www.manageengine.com/threat-analysis-lab/aomei-backupper-supply-chain-compromise.html ConnectWise incident coverage: https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ Subscribe to Cybersecurity Today for verified cyberattack investigations, AI security news, and practical defense insights. https://www.youtube.com/@CybersecurityTodayNews Stay informed. Stay skeptical. And stay secure. #CybersecurityToday, #CyberSecurity, #SupplyChainAttack, #AOMEI, #Malware, #CyberAttack, #Microsoft365, #InformationSecurity, #IndiaCyberSecurity, 00:00 The Five-Minute Software Update Attack 01:30 Why Trusted Backup Software Matters 02:55 Three Attack Windows: 10, 6, and 5 Minutes 04:20 How Hackers Hijacked the Update Process 06:00 CROSSROAD and SHINYROAD Malware 07:50 Eleven Countries Affected 09:15 ConnectWise and the Risks of Trusted Applications 10:40 Four Defensive Actions Organizations Should Take 12:55 Why Five Minutes Can Have Lasting Consequences 14:10 Final Takeaways and Related Investigation EI40B4RNLOAHMFER