cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
Nyxfrom the update-channel-turned-supply-chain dept.
An attacker compromised the update channel for cPGuard, a Linux security tool, and pushed malicious code to customer servers starting November 2. The script installed a backdoor and exfiltrated password hashes and sensitive files. OPSSHIELD, the vendor, has released details and patched versions.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.