Security News ‘PlushDaemon’ hackers hijack software updates in supply-chain attacks BleepingComputer Daniel Bender 19 Nov 2025 The China-aligned advanced persistent threat (APT) tracked as 'PlushDaemon' is hijacking software update traffic to deliver malicious payloads to its targets.