Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
74
Malware
CWPdoor
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenNov 5, 2026
- Last mentioned2h ago
Timeline
3 articles · newest firstHackers hide backdoor in Control Web Panel server
cwpdoor backdoor in CWP allows command execution without logs; real victims exist.
60
Hackers Deploy CWPdoor Backdoor via Trojanized CWP Server
A new Linux malware called CWPdoor is distributed through trojanized versions of cwpsrv in the Control Web Panel web server, affecting over 340,000 exposed instances.
65
Related CVEs
by mentions- Out-of-bounds write in Zyxel GS1900-24E CGI up to 2.90(AAHK.2)C0
- CVE-2026-1231581%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
- CVE-2026-109518<1%7.7Man-in-the-middle RCE in APT on Debian and Ubuntu
Appears with
- XLaborganization · 2
- Control Web Panelproduct · 2
- cwpsrvproduct · 1
- OPSSHIELDvendor · 1
- mSeven Softwarevendor · 1
- QiAnXin Technology Grouporganization · 1
- Crafty Falconthreat actor · 1
- Kapibalathreat actor · 1
- CERT-Inorganization · 1
- Zyxelvendor · 1
- GS1900product · 1
- JITTERLYmalware · 1
- OpenSSHproduct · 1
- mSecureproduct · 1
- APTproduct · 1
- SIXZUTmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.