A poisoned security update reached about 2,950 servers
Notas del episodio
Evening edition, Saturday 7 November 2026
An intruder used a billing portal to reach the update store of the cPGuard security suite and push a root-level backdoor to about 2,950 servers. Plus Plex2Shell attacks on NAS boxes, and the NCSC's 2028 AI ransomware warning.
Sources
- OpsShield: security incident disclosure
- BleepingComputer: Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
- QNAP security notice: Plex Media Server vulnerabilities (Plex2Shell)
- BleepingComputer: CISA, hackers chain Plex flaws in Plex2Shell attacks to breach servers
- NCSC: Cyber chief, UK facing AI-powered attacks on critical infrastructure within two years
- Insurance Business UK: NCSC warns of unprecedented rise in cyber incidents