Poisoned Security Update Exposed Nearly 3,000 Hosting Servers
Daily Cyber News: Poisoned Security Update Exposed Nearly 3,000 Hosting Servers
Nearly three thousand Linux hosting servers ran a malicious cPGuard update as root after an attacker compromised the vendor’s update infrastructure. Versions 5.88.12 through 5.88.19 were distributed for more than 70 minutes on November 2nd. The script collected sensitive files and planted a hidden root shell.
Key context: Potentially exposed material includes password hashes, root S S H keys, MySQL root passwords, shell history and cloud storage keys.
Additional detail: Leaders should prepare for broad credential rotation, customer communication and possible server rebuilds.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, linux, Poisoned Security Update Exposed Nearly, Hosting Servers, Poisoned, Security, Exposed, Nearly.
