Skip to main content
cve.nowby Sazabi
← Early warnings
SZB-1923e002d8Early warningMalicious packageReported, not confirmed

BleepingComputer reports attackers compromised cPGuard update infrastructure

BleepingComputer reports that attackers compromised the update infrastructure for the cPGuard web security suite. The compromised updates were reportedly used to distribute a backdoor and a data-stealing script.

Written by a model from the sources below. Verify against them.

Sources1Reported, not confirmed
Kind
Malicious package
Vendor
cPGuard
Product
cPGuard web security suite
Status
Reported, not confirmed
First seen

What to do

  • Check installed cPGuard versions and verify them against the vendor's official release channel

  • Remove or reinstall cPGuard from a trusted source if a recent update was installed

  • Scan affected web servers for backdoor and data-stealing indicators

  • Rotate credentials and secrets that were stored on systems running cPGuard

Timeline

  1. Made public by BleepingComputer on Bluesky1 day
  2. First seen by cve.now

Evidence 1

  1. Press
    BleepingComputer on Bluesky
    “Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script.”

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

FAQ

Questions about SZB-1923e002d8

Has cPGuard confirmed it?

BleepingComputer on Bluesky reports it. No statement from cPGuard has reached cve.now yet.Source: BleepingComputer on Bluesky

What should cPGuard users do?

Check installed cPGuard versions and verify them against the vendor's official release channel. Remove or reinstall cPGuard from a trusted source if a recent update was installed. Scan affected web servers for backdoor and data-stealing indicators. Rotate credentials and secrets that were stored on systems running cPGuard.

Sources