A critical security issue in a popular endpoint manager allowed Chinese state-sponsored attackers to backdoor Japanese businesses.