Microsoft says: Lock down your software supply chain before the malware scum get in
Stealthy attack code spotted going after payment systems Microsoft's security team is urging developers to shore up their software update systems - after catching miscreants hijacking an editing application's download channels to inject malware into victims' PCs."