cPGuard's own update channel pushed a root backdoor that stole /etc/shadow and SSH keys. https://intel.threadlinqs.com/threat/TL-2026-5162?utm_source=bluesky #ThreatIntel #cpgcli #cPGuard #OPSSHIELD
November 3, 2026 at 4:20 PM
cPGuard's own update channel pushed a root backdoor that stole /etc/shadow and SSH keys. https://intel.threadlinqs.com/threat/TL-2026-5162?utm_source=bluesky #ThreatIntel #cpgcli #cPGuard #OPSSHIELD
cPGuard's own update channel shipped a root backdoor to about 2,950 servers in ~70 minutes (OPSSHIELD's count). The way in was the billing portal. Versions 5.88.12-5.88.19 are bad; check cpgcli --version. https://www.dugganusa.com/post/cpguard-update-channel-root-backdoor #ThreatIntel
November 4, 2026 at 2:37 PM
cPGuard's own update channel shipped a root backdoor to about 2,950 servers in ~70 minutes (OPSSHIELD's count). The way in was the billing portal. Versions 5.88.12-5.88.19 are bad; check cpgcli --version. https://www.dugganusa.com/post/cpguard-update-channel-root-backdoor #ThreatIntel