OpsShield says attackers used stolen credentials to breach its CDN and push a malicious script through cPGuard's auto-update channel between 02:06 UTC on November 2 and roughly 12 hours later, affecting versions 5.88.12 through 5.88.19. The script harvested Linux password hashes, root database configs, root shell history, and SSH keys, uploading them to OpsShield's own licensing server, where the attacker pulled an average of 32 files per compromised customer.
bleepingcomputer.com
· 2026-11-03
The Canadian Centre for Cyber Security has updated its May advisory to warn that CVE-2026-48842, a pre-authenticated SQL injection bug in Roundcube Webmail's virtuser_query plugin, is now being exploited in the wild. Roundcube patched the flaw in May with versions 1.6.16 and 1.7.1, but Shadowserver still counts over 523,000 internet-exposed Roundcube instances, with no clear data on how many remain unpatched.
bleepingcomputer.com
· 2026-09-24
Acronis has patched a high-severity local privilege escalation flaw, tracked as CVE-2026-87886, in its backup add-ons for cPanel/WHM and Plesk. The company says it has seen limited, targeted exploitation attempts against affected deployments, based on a report from one potentially affected customer. Fixed versions are 1.9.3 HF3 for cPanel/WHM and 1.8.11 for Plesk.
bleepingcomputer.com
· 2026-09-15
GoKawiil