Mac and Windows users infected by software updates delivered over hacked ISP (arstechnica.com)

This sort of thing is the reason I never got comfortable with automatic updates.

System updates are not concerned. Here, we are talking about applications whose update mechanisms are completely flawed. As mentioned, these applications do not use TLS or cryptographic signatures to authenticate the connections or the downloaded software.