OrBit: New evasive and persistent Linux malware
Researchers from Intezer have discovered a new evasive and persistent Linux malware dubbed OrBit.
Linux
CISA adds 8 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include PwnKit)
The Cybersecurity and Infrastructure Security Agency (CISA) has added eight vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include two Apple, Mitel, Google Chromium, and the RedHat “PwnKit” vulnerability (CVE-2021-4034) in Polkit’s pkexec tool.
Symbiote: Linux malware ‘nearly impossible to detect’ threat
Researchers have discovered a new Linux malware dubbed Symbiote, a ‘nearly impossible to detect’ threat.
XorDdos: DDoS malware targets Linux systems
Over the past six months, Microsoft has observed a spike in cyberactivity of 254% from XorDdos, a trojan targeting Linux-based cloud systems and Internet of Things (IoT) devices.
Microsoft discovers Nimbuspwn Linux vulnerabilities
Microsoft researchers have discovered a collection of Linux vulnerabilities dubbed Nimbuspwn that could lead to privilege escalation as root on Linux desktop systems.
Dirty Pipe privilege escalation vulnerability found in Linux kernel
A High severity privilege escalation vulnerability CVE-2022-0847 dubbed “Dirty Pipe” was found in Linux kernel. The issue was fixed in Linux kernel versions 5.16.11, 5.15.25 and 5.10.102.
Linux Cgroup vulnerability can cause container escape
A new Linux privileged escalation vulnerability in Cgroups feature could cause container escape on unhardened hosts. This is the third in a line of similar Kernel vulnerabilities that could allow containers to escape.
PwnKit: “Trivially exploitable” vulnerability found in Linux Polkit’s pkexec tool
Researchers have discovered a “trivially exploitable” local privilege escalation vulnerability (CVE-2021-4034) in Polkit’s pkexec tool that affects likely every major Linux distribution.
Ubuntu 21.04 (Hirsute Hippo) end-of-life January 20, 2022
Ubuntu 21.04 (Hirsute Hippo) has reached its end-of-life (EOL) January 20, 2022, nearly nine months after its initial release.
BusyBox vulnerabilities impact embedded Linux OS used in IoT and OT devices
Researchers have discovered 14 BusyBox vulnerabilities that impact embedded Linux OS used in many internet of things (IoT) and operational technology (OT) devices.