#6
The Hacker News
general
November 03, 2026 at 15:16 UTC
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
By [email protected] (The Hacker News)
AI Summary
On November 2, an attacker compromised OPSSHIELD's cPGuard update channel and pushed a malicious script via version 5.88.25 that installed a backdoor and harvested password hashes and sensitive files from customer Linux servers. The attacker used compromised credentials to access the update infrastructure, making this a classic supply-chain attack affecting any server that applied the poisoned update. Administrators running cPGuard should audit affected systems and rotate all credentials immediately.
Relevance score: 82.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →