cPGuard update channel hijacked to backdoor Linux servers

An attacker compromised the update system for cPGuard security tool on November 2, delivering a malicious script to Linux servers running version 5.88.25 and later. The script installed a backdoor and exfiltrated password hashes and sensitive files. OPSSHIELD confirmed the breach. Users should update from a trusted source and audit affected systems for unauthorized access.