News in the Linux category

Hacker-made Linux Cobalt Strike beacon used in ongoing attacks

An unofficial Cobalt Strike Beacon Linux version made by unknown threat actors from scratch has been spotted by security researchers while actively used in attacks targeting organizations worldwide.
- Sergiu Gatlan
- September 13, 2021
- 10:00 AM
- 0
Windows 10 now lets you install WSL with a single command

Microsoft says the Windows Subsystem for Linux (WSL) can now be installed on Windows 10, version 2004 or later using a single terminal command.
- Sergiu Gatlan
- July 30, 2021
- 03:08 PM
- 3
New Linux kernel bug lets you get root on most modern distros

Unprivileged attackers can gain root privileges by exploiting a local privilege escalation (LPE) vulnerability in default configurations of the Linux Kernel's filesystem layer on vulnerable devices.
- Sergiu Gatlan
- July 20, 2021
- 12:21 PM
- 0
Linux version of HelloKitty ransomware targets VMware ESXi servers

The ransomware gang behind the highly publicized attack on CD Projekt Red uses a Linux variant that targets VMware's ESXi virtual machine platform for maximum damage.
- Lawrence Abrams
- July 15, 2021
- 11:13 AM
- 3
REvil ransomware's new Linux encryptor targets ESXi virtual machines

The REvil ransomware operation is now using a Linux encryptor that targets and encrypts Vmware ESXi virtual machines.
- Lawrence Abrams
- June 28, 2021
- 05:26 PM
- 0
Microsoft Linux repos suffer day-long outage, still recovering

This week, Microsoft's Linux package repositories have been suffering hours-to-day long outages or performance issues.
- Ax Sharma
- June 18, 2021
- 04:41 AM
- 0
Linux system service bug lets you get root on most modern distros

Unprivileged attackers can get a root shell by exploiting an authentication bypass vulnerability in the polkit auth system service installed by default on many modern Linux distributions.
- Sergiu Gatlan
- June 11, 2021
- 07:58 AM
- 5
FreakOut malware worms its way into vulnerable VMware servers

A multi-platform Python-based malware targeting Windows and Linux devices has now been upgraded to worm its way into Internet-exposed VMware vCenter servers unpatched against a remote code execution vulnerability.
- Sergiu Gatlan
- June 04, 2021
- 09:03 AM
- 0
Kali Linux 2021.2 released with new tools, improvements, and themes

Kali Linux 2021.2 was released today by Offensive Security and includes new themes and features, such as access to privileged ports, new tools, and a console-based configuration utility.
- Lawrence Abrams
- June 02, 2021
- 11:50 AM
- 0
Microsoft: Windows 10 Insiders can now can run Linux GUI apps

Microsoft announced today at the Build 2021 developer conference that support for running Linux GUI apps is now available via Windows Subsystem for Linux (WSL).
- Sergiu Gatlan
- May 25, 2021
- 01:49 PM
- 0
Critical 21Nails Exim bugs expose millions of servers to attacks

Newly discovered critical vulnerabilities in the Exim message transfer agent (MTA) software allow unauthenticated remote attackers to execute arbitrary code and gain root privilege on mail servers with default or common configurations.
- Sergiu Gatlan
- May 04, 2021
- 11:46 AM
- 0
New stealthy Linux malware used to backdoor systems for years

A recently discovered Linux malware with backdoor capabilities has flown under the radar for years, allowing attackers to harvest and exfiltrate sensitive information from compromised devices.
- Sergiu Gatlan
- April 28, 2021
- 12:29 PM
- 7
Windows 10 now lets you seamlessly run Linux GUI apps

Windows 10 now lets you run Linux GUI apps (X11 and Wayland) without using a virtual machine after Microsoft added GUI support to the Windows Subsystem for Linux (WSL).
- Sergiu Gatlan
- April 21, 2021
- 04:05 PM
- 1
Linux bans University of Minnesota for committing malicious code

Linux kernel project maintainers have imposed a ban on the University of Minnesota (UMN) from contributing to the open-source Linux project after a group of UMN researchers were caught submitting a series of malicious code commits, or patches that deliberately introduced security vulnerabilities in the official Linux project.
- Ax Sharma
- April 21, 2021
- 01:08 PM
- 1
VMware fixes authentication bypass in data center security software

VMware has addressed a critical vulnerability in the VMware Carbon Black Cloud Workload appliance that could allow attackers to bypass authentication after exploiting vulnerable servers.
- Sergiu Gatlan
- April 01, 2021
- 12:58 PM
- 0
15-year-old Linux kernel bugs let attackers gain root privileges

Three security vulnerabilities found in the iSCSI subsystem of the Linux kernel could allow local attackers with basic user privileges to gain root privileges on unpatched Linux systems.
- Sergiu Gatlan
- March 13, 2021
- 10:15 AM
- 0
7-Zip developer releases the first official Linux version

An official version of the popular 7-zip archiving program has been released for Linux for the first time.
- Lawrence Abrams
- March 11, 2021
- 05:14 PM
- 2
New Firefox version fixes Linux crashes, Apple Silicon hangs

Mozilla today started rolling out Firefox 86.0.1 to address a known bug causing the web browser to crash frequently when launched on Linux systems.
- Sergiu Gatlan
- March 11, 2021
- 02:40 PM
- 0
Chinese state hackers target Linux systems with new malware

Security researchers at Intezer have discovered a previously undocumented backdoor dubbed RedXOR, with links to a Chinese-sponsored hacking group and used in ongoing attacks targeting Linux systems.
- Sergiu Gatlan
- March 11, 2021
- 08:46 AM
- 0
GRUB2 boot loader reveals multiple high severity vulnerabilities

GRUB, a popular Linux boot loader project has fixed multiple high severity vulnerabilities.
- Ax Sharma
- March 03, 2021
- 02:37 PM
- 1