AV vendor goes to war with security shop over update server scare

A spat has erupted between antivirus vendor eScan and threat intelligence outfit Morphisec over who spotted an update server incident that disrupted some eScan customers earlier this month.

Morphisec fired the opening salvo with a blog post calling the incident a "critical supply-chain compromise," alleging hackers used eScan's own update system to push malicious files and interfere with cleanup. MicroWorld Technologies-owned eScan, however, says that Morphisec's account is wrong on multiple fronts.

In a statement to The Register, eScan said it detected suspicious activity through its internal monitoring before any external notification and initiated incident response the same day.

"eScan detected suspicious activity through our internal monitoring systems on January 20, 2026, and immediately initiated our incident response protocol," a spokesperson said. "We issued a preliminary security advisory to customers on January 21, 2026, along with a remediation patch."

The company alleges Morphisec published its blog and accompanying ...