A keyboard asked its vendor for icons over plain HTTP. Somebody answered
2026-11-05Security
ESET found a China-aligned group hijacking DNS for a Sogou Input Method update host, rewriting the integrity fields to match its own payloads and side-loading an implant. Tencent fixed it in version 16.10.