Malicious cPGuard updates served in OpsShield supply chain attack
BREACHcPGuardredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers used compromised credentials to access OpsShield's update servers and poisoned multiple cPGuard versions, with the malicious builds served to users through the legitimate update channel. The article does not list affected version numbers, CVE identifiers or indicators of compromise. Defenders should identify any cPGuard installations and review which update packages were installed, pending vendor guidance.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether your systems run cPGuard, since the article gives no affected version numbers.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
SecurityWeek
Who and what is in it
Products