{"id":209744,"date":"2026-01-29T11:58:00","date_gmt":"2026-01-29T16:58:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/01\/29\/av-vendor-disputes-security-shops-update-server-claims-the-register\/"},"modified":"2026-02-03T21:15:11","modified_gmt":"2026-02-04T02:15:11","slug":"av-vendor-disputes-security-shops-update-server-claims-the-register","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/01\/29\/av-vendor-disputes-security-shops-update-server-claims-the-register\/","title":{"rendered":"AV vendor disputes security shop’s update server claims \u2022 The Register"},"content":{"rendered":"

AV vendor disputes security shop’s update server claims \u2022 The Register<\/a><\/p>\n

https:\/\/www.theregister.com\/2026\/01\/29\/escan_morphisec_dispute\/<\/a><\/p>\n

Publish Date: 2026-01-29 11:58:00<\/a><\/p>\n

Source Domain: www.theregister.com<\/a><\/p>\n

A spat has erupted between antivirus vendor eScan and threat intelligence outfit Morphisec over who spotted an update server incident that disrupted some eScan customers earlier this month.<\/p>\n

Morphisec fired the opening salvo with a blog post calling the incident a “critical supply-chain compromise,” alleging hackers used eScan’s own update system to push malicious files and interfere with cleanup. MicroWorld Technologies-owned eScan, however, says that Morphisec’s account is wrong on multiple fronts.<\/p>\n

In a statement to The Register, eScan said it detected suspicious activity through its internal monitoring before any external notification and initiated incident response the same day.<\/p>\n

“eScan detected suspicious activity through our internal monitoring systems on January 20, 2026, and immediately initiated our incident response protocol,” a spokesperson said. “We issued a preliminary security advisory to customers on January 21, 2026, along with a remediation patch.”<\/p>\n

The company alleges Morphisec published its blog and accompanying social posts later that day, claiming discovery and mischaracterizing the incident’s technical details and scope.<\/p>\n

The customer advisory eScan sent to affected users on January 22, as seen by The Register, offers a much narrower version of events. An unauthorized user gained access to configuration on a single regional update server, resulting in a rogue file briefly appearing in the update path for about two hours on January 20. The advisory states that the file distributed was not an official eScan binary or a legitimate update, and that no vulnerability existed in the eScan product itself.<\/p>\n

According to eScan, machines that downloaded updates from the affected server during the short window could suddenly stop updating, display error pop-ups, or have their hosts files modified in a way…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

AV vendor disputes security shop’s update server claims \u2022 The Register https:\/\/www.theregister.com\/2026\/01\/29\/escan_morphisec_dispute\/ Publish Date: 2026-01-29…<\/p>\n","protected":false},"author":1,"featured_media":209745,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/regmedia.co.uk\/2020\/05\/06\/shutterstock_business_boxing.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[27],"class_list":["post-209744","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/209744"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=209744"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/209744\/revisions"}],"predecessor-version":[{"id":209746,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/209744\/revisions\/209746"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/209745"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=209744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=209744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=209744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}