software update compromise