Compromised cPGuard updates expose nearly 3,000 servers
Daily Cyber News: Compromised cPGuard updates expose nearly 3,000 servers
A trusted security update channel distributed a backdoor and data-stealing script to cPGuard servers. The developer said attackers used compromised credentials to access its distribution infrastructure on November 2nd. Versions 5.88.12 through 5.88.19 were affected before the malicious distribution was stopped within 12 hours.
Key context: For leaders, the central issue is that software intended to protect servers became the route for compromising them.
Additional detail: That makes this both a supply-chain incident and a credential-recovery operation.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, Compromised, cPGuard, updates, expose, nearly, servers.
