cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

Threat actors breached the update infrastructure of the cPGuard security tool, pushing a malicious script to customer Linux servers. The script deployed a backdoor and harvested sensitive data, including password hashes. Administrators running affected cPGuard versions must immediately investigate potential system compromise and ensure systems are patched.