Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Posted by PrivacyWire
A compromised software update system can turn a trusted security tool into a way to install a backdoor on systems that rely on it. The data-stealing script also shows how an attack on one vendor can expose private information across many customers. Has anyone here changed how they handle automatic updates or security tools after incidents like this?