Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
A previously unknown Linux malware has been exploiting 30 vulnerabilities in multiple outdated WordPress plugins and themes to inject malicious JavaScript. . According to a report by antivirus vendor Dr. Web , the malware targets both 32-bit and 64-bit Linux systems, giving its operator remote command capabilities. The main functionality of the trojan is to hack WordPress sites using a set of hardcoded exploits that are run successively, until one of them works. . Security firm Kaspersky has identified malicious code targeting both 32-bit and 64-bit versions of Linux OS, exploiting vulnerabilities in legacy themes and plugins from Joomla.. Linux Malware, WordPress Exploits, Plugin Security. . LinuxSecurity.com Team
I've got good news and bad news for those of the misguided perception that Linux is somehow impervious to attack or compromise. The bad news is that it turns out a vast collection of Linux systems may, in fact, be pwned. The good news, at least for IT administrators and organizations that rely on Linux as a server or desktop operating system, is that the Trojan is in a game download so it should have no bearing on Linux in a business setting.. An announcement on the Unreal IRCd Forums states "This is very embarrassing...We found out that the Unreal3.2.8.1.tar.gz file on our mirrors has been replaced quite a while ago with a version with a backdoor (trojan) in it. This backdoor allows a person to execute ANY command with the privileges of he user running the ircd. The backdoor can be executed regardless of any user restrictions (so even if you have passworded server or hub that doesn't allow any users in)." The link for this article located at Network World is no longer available. . An announcement on the Unreal IRCd Forums states 'This is very embarrassing...We found out that the . those, misguided, perception, linux, somehow, impervio. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.