A Fake cPGuard Update Ran as Root on Hosting Servers
A malicious cPGuard update ran as root. Review the delivery window, look for compromise and rotate credentials exposed on affected servers.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Barracuda Patches a Chain That Can Give Attackers Root
Two flaws can give an attacker root on a Barracuda Email Security Gateway. Check management access and apply the patch for your firmware.
Tracebit Tests How Decoys Change an AI Attacker’s Decisions
Tracebit’s October cloud experiment reports fewer completed objectives and higher costs. The baseline, model differences and denominators matter.
Expressway Fixes Need More Than One Version Check
Cisco’s Expressway fixes have different scopes and version thresholds. Check clustered database access, wider hardening, provisioning and embedded PHP.
Snort 3 Fixes Need the Product’s Update Path
Snort 3’s October fixes have separate product paths, a local socket flaw and conflicting Cyber Vision records. Check the engine and inspection package.
Thunderbird Fixes Unwanted Connections and Message Leaks
Thunderbird’s October updates address unwanted connections, message leaks and calendar or feed redirects. Windows credential exposure needs a separate check.
Tomcat’s Login and HTTP/2 Fixes Need Different Checks
Tomcat’s October fixes cover distinct HTTP/2 and directory-login paths. Check different affected ranges, unsupported branches and the build actually running.
Check Mattermost’s Build Before November’s Disclosures
Mattermost’s October fixes have different branch thresholds. Check the Agents reminder flaw, later updates and an unresolved version entry before calling maintenance complete.
SafePay Makes Backup Recovery an Incident-Response Problem
SafePay investigators describe attacks on network-connected backups. Review recovery copies, administrator access and five older flaws with distinct exposure conditions.
GoAhead TLS Fixes Need Evidence From the Device
Three GoAhead TLS defects depend on different libraries and settings. Verify the manufacturer’s correction on the running device, not just its firmware label.