Daemon Tools suffers a monthlong supply-chain attack, exposing users to serious security vulnerabilities.