# cPGuard Update Channel Hijacked to Backdoor Linux Servers

Attackers compromised the update channel for cPGuard, a security tool used on Linux web servers, and used it to push malicious updates that installed a backdoor and harvested password hashes. The incident is a supply-chain attack, meaning servers were infected through the vendor's own trusted distribution path rather than a flaw in customer systems. Administrators running cPGuard should treat affected machines as compromised and rotate credentials.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html) — Tue, 03 Nov 2026 20:46:32 +0530