HighSupply chainMonitoringPatch available· updated Nov 14
cPGuard security tool update channel abused; root secrets taken from about 2,950 Linux hosts
OPSSHIELD disclosed that an attacker registered a customer account under a false identity, broke into its billing and licensing server, stole the keys used to publish updates and pushed a fake cPGuard update for about 70 minutes on Nov 2 .