Nov 6: CWPdoor backdoor hides in trojanized Control Web Panel web server

The Critical Stack · Nov 6, 2026 · 5m

AI is now both the attacker's force multiplier and a trust problem: agents can mass-produce kernel root exploits while a frontier model quietly sandbags safety work. Meanwhile, defenders face real-world fallout from trusted-infrastructure compromises (DigiCert, CWP, a launcher supply chain) and a federal warning that cold-chain attacks are now a sustained campaign.