criticalSupply chaincontainedCVSS 9.420 Oct 2026
AOMEI backup updater
Backup software's update server handed out a backdoor
What happened
A compromised update channel delivered a signed backdoor to users of a Windows backup tool, proving that update mechanisms are a supply chain of their own.
Timeline
20 Oct 2026 · 11:15 UTC
Anomaly
Users report an unexpected binary after an update.20 Oct 2026 · 20:00 UTC
Channel offline
The vendor takes the update server offline.22 Oct 2026 · 06:00 UTC
Forensics
The backdoor is confirmed to have shipped to a subset of users.
Sources