credential rotation – Security Blog https://blog.siteguarding.com Wed, 04 Nov 2026 09:44:15 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg credential rotation – Security Blog https://blog.siteguarding.com 32 32 cPGuard Backdoor: Your CMS Passwords May Already Be Copied https://www.siteguarding.com/security-blog/cpguard-backdoor-cms-secrets/ Wed, 04 Nov 2026 09:44:15 +0000 https://www.siteguarding.com/security-blog/cpguard-backdoor-cms-secrets/ A cPGuard backdoor went out through the product's own auto-update on 2 November 2026. OpsShield, the vendor, told BleepingComputer that 2,946 servers were affected, and its investigation shows the attacker retrieved root-level secrets from them. If your WordPress or Joomla site runs on one of those servers, your database password may already be copied. The vendor's fix does not change that.

Source

]]> cPGuard Update Hack: What Site Owners on Affected Servers Must Do https://www.siteguarding.com/security-blog/cpguard-update-hack-site-owners/ Wed, 04 Nov 2026 09:26:47 +0000 https://www.siteguarding.com/security-blog/cpguard-update-hack-site-owners/ The cPGuard update hack began at 02:06 UTC on 2 November 2026, when an attacker used stolen credentials to push a data-stealing script through the update channel of OpsShield's Linux server security suite. OpsShield says 2,946 servers were affected. If your site lives on one of them, someone may already have your database password, and updating cPGuard does not change that. Key takeaways It can.

Source

]]>