Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

The Hacker News · Friday, 6 November 2026 at 05:58 (3h ago) · Original article ↗

A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week.

The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data…

The Hacker News 56m ago

Security

At least 10 local governments have moved to drop Flock’s surveillance cameras since summer

The concerns range from privacy to how data is shared (and with whom) to procurement concerns.

TechCrunch 2h ago

Security

Hospital gave very sick doctor a special PC for his personal, erm, pleasure

Support chap told to either allow blatant policy violations or find a new job

The Register 3h ago

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

More Security & Privacy

Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

At least 10 local governments have moved to drop Flock’s surveillance cameras since summer

Hospital gave very sick doctor a special PC for his personal, erm, pleasure