Lazarus Group compromised Taiwanese software provider CyberLink’s network and embedded malicious code in an update of CyberLink’s Promeo software. The attack appeared aimed at compromising the networks of CyberLink customers, including critical government, financial, and defense systems in countries including the United States, Canada, Japan, and Taiwan.