Glossary: Physical and Wireless Vectors, and Vulnerabilities
Malicious update
Harmful code delivered through the trusted update path, for example via a compromised vendor, a hijacked download server, a taken-over project or a fake update pop-up. The harm comes because the system updated, as with the 4.2.1 shipping-label plug-in.
Where the book teaches it
Related terms
Supply chain-based vectorDigital signatureStaged updatesXZ UtilsSolarWinds OrionTrojan