Skip to content

Glossary: Physical and Wireless Vectors, and Vulnerabilities

Malicious update

Harmful code delivered through the trusted update path, for example via a compromised vendor, a hijacked download server, a taken-over project or a fake update pop-up. The harm comes because the system updated, as with the 4.2.1 shipping-label plug-in.

Where the book teaches it

Related terms

Supply chain-based vectorDigital signatureStaged updatesXZ UtilsSolarWinds OrionTrojan