Energy

Attackers have spent at least 14 weeks inside North American energy software vendors, quietly abusing update channels. Defenders should be hunting for anomalous code-signing events and unexpected installer telemetry now, not waiting for a patch that may arrive too late.