Friday, April 24, 2026
HomeTagsLinux

Tag: linux

Weaponizing Legitimate System Behaviors to Exfiltrate Secrets in Shared Linux Environments

Shared Linux hosting environments are designed to maximize transparency and facilitate system administration, but these very features can be weaponized by malicious users to harvest sensitive data. Security researcher Ionuț Cernica recently demonstrated how standard Linux utilities and predictable file behaviors can be exploited...

Linux 6.16 Released – Optimized for Better Performance and Networking

Linux kernel development continues at a rapid pace, with the latest discussions and patches indicating significant improvements coming to the Linux 6.16 development cycle. Based on recent activity in the Linux Kernel Mailing List (LKML), developers are focusing heavily on networking enhancements, memory management...

Ransomware Gangs Widening Their Reach – Targeting VMware and Linux Systems

Cybersecurity experts are sounding the alarm as ransomware operators increasingly pivot toward Linux environments, shattering the long-held belief that these systems are inherently secure. With Linux powering over 80% of public cloud workloads and 96% of the top million web servers, threat actors are...

RingReaper – New Linux EDR Evasion Tool Using io_uring Kernel Feature

A sophisticated new Linux evasion tool called RingReaper that leverages the io_uring kernel feature to bypass traditional Endpoint Detection and Response (EDR) systems. The tool demonstrates how legitimate system features can be repurposed to evade modern security solutions, presenting significant challenges for cybersecurity defenders...

PoC Released for Critical Linux Privilege Vulnerability in udisksd/libblockdev

A proof-of-concept exploit for a critical local privilege escalation vulnerability affecting Fedora and SUSE Linux distributions. The vulnerability, tracked as CVE-2025-6019, allows users in the allow_active group to escalate privileges to root through the udisksd daemon and its backend library libblockdev. The vulnerability has...

Chinese Houken Hackers Leveraging Ivanti CSA Vulnerabilities to Deploy Sophisticated Linux Rootkits

A recent cyberattack campaign has impacted critical sectors in France, with a China-linked threat group dubbed “Houken” exploiting zero-day vulnerabilities in Ivanti Cloud Service Appliance (CSA) devices. The campaign, observed by France’s ANSSI (Agence nationale de la sécurité des systèmes d’information), highlights a new...