We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
The infamous FinSpy spyware has returned - and is now targeting Linux and macOS users. FinSpy is being used in new campaigns targeting dissident organizations in Egypt.
Lucifer malware emerged a few months ago as a typical Windows malware. However, it has now returned with greater power and new capabilities - enabling it to target Linux systems.
Lucifer - a hybrid DDoS cryptomining botnet notorious for hijacking vulnerable Windows devices - is now also scanning for and infecting Linux systems.
A recently-discovered fileless malware variant - dubbed FritzFrog - has breaching Linux servers to mine Monero for at least eight months.
Drovorub - yet another strain of malware targeting Linux systems - is being used by malicious Russian hackers to spy on users, steal files and hijack devices.
The NSA and FBI warn that a new Linux malware variant - dubbed Drovorub - is being used by APT 28 to compromise networks, execute malicious commands and steal sensitive data.
TrickBot's Anchor malware platform - which has historically threatened Windows systems - has now been ported to a new Linux backdoor version, Anchor_Linux.
Another week, another Linux malware variant. Doki - a new Linux backdoor malware strain - targets Docker instances.
Have you heard about the dangerous new ransomware strain dubbed "Tycoon" that is targeting Linux and Windows systems across a number of industries?
Security researchers have discovered a dangerous new strain of ransomware targeting Linux and Windows systems that uses a Java file format, making it highly difficult to detect before it detonates its file-encrypting payload.
Have you heard about 'Octopus Scanner', a dangerous strain of malware targeting developers on Github? Github has stated: "Since the primary-infected users are developers, the access that is gained is of high interest to attackers since developers generally have access to additional projects, production environments, database passwords, and other critical assets. There is a huge potential for escalation of access, which is a core attacker objective in most cases."
TheNational Security Agency (NSA) has publicly accused Sandworm, an infamous Russian hacking group, of exploiting a flaw in Exim software commonly found in Linux computers.
Have you heard that GoDaddy has admitted customer usernames and passwords for connecting remotely to Linux servers via SSH have been compromised, forcing providers to reset passwords on 28,000 accounts?
Have you heard about the attack campaign that is targeting Docker users with cryptocurrency mining malware via exposed APIs?
Have you heard about the newly uncovered hacking campaign which has been operating successfully against unpatched Linux servers for almost a decade?
A sophisticated hacker group pwned Amazon Web Services (AWS) servers, set up a rootkit that let them remotely control servers, then merrily funnelled sensitive corporate data home to its command and control (C2) servers from a range of compromised Windows and Linux machines inside an AWS data centre.
Have you heard about the new Cloud Snooper malware which uses a Linux kernel driver to attack cloud servers?
Lazarus, an advanced persistent threat (APT) group, has expanded its reach with the development and use of a Trojan designed to attack Linux systems. Learn more:
Chinese security researchers were able to successfully discover zero-day vulnerabilities in Chrome, Edge, Safari, Office 365, qemu-kvm + Ubuntu and more at a recently held hacking competition in the city of Chengdu in China. Learn more in an interesting TechWorm article:
A team of cybersecurity researchers has discovered a clever technique which relies on a vulnerability in MEMS microphones embedded in voice-controllable systems to remotely inject inaudible and invisible commands into voice-controlled devices — all just by shining a laser at the targeted device instead of using spoken words. Learn more about this hack and how to protect yourself against it in real-life in a great The Hacker News article:
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
