Hackers hijack cPGuard autoupdate to deploy backdoor and steal data
BREACHcPGuardredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers compromised the autoupdate infrastructure of the cPGuard web security suite and used it to distribute a backdoor and a data-stealing script. The article does not give affected versions, CVE identifiers or indicators of compromise. Defenders using cPGuard should check hosts for unexpected updates and review the vendor's guidance before trusting the update channel.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether your organisation uses cPGuard and review recent update activity on affected systems.
- Follow the vendor's guidance on the compromised update channel before reinstalling or re-enabling automatic updates.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer
Who and what is in it
Products