Three Linux kernel vulnerabilities have been identified and added to CISA's Known Exploited Vulnerabilities catalog. These flaws allow local attackers to cause denial-of-service conditions, memory disclosure, or unauthorized memory modification. The vulnerabilities involve issues in the TLS receive path, AF_ALG socket handling, and bridge Netfilter ebtables SNAT target. Federal agencies are urged to patch these vulnerabilities promptly.
Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...]
A $1 million bug bounty challenge by Vercel uncovered multiple vulnerabilities in the Linux kernel's networking stack used in their Firecracker-based microVM sandbox environment. The challenge generated 1,285 reports over two weeks, identifying one critical and several high- and medium-severity issues. Notably, two independent Linux kernel flaws were found: one causing memory leaks and another causing deterministic host crashes. These vulnerabilities have broad implications for cloud providers using similar Linux kernel isolation techniques. No customer data was accessed during the challenge. Fixes are under private review with CVEs pending. Vercel automated report triage using AI to handle the high volume of submissions and improved their sandbox security based on findings.
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...]
Published: 2026-09-09 Reference: GHSA-p7v4-vr35-mj6f Description Severity A security vulnerability GHSA-p7v4-vr35-mj6f (CVE assignment pending) in containerd's CRI implementation allows a container restored from an untrusted checkpoint through the CreateContainer API to bypass the destination security context and execute with elevated privileges. When restoring a container from a checkpoint archive or annotated OCI image, CRIU restores process credentials, Linux capabilities, no_new_privs , and seccomp state directly from checkpoint data rather than enforcing the destination CRI ContainerConfig . An attacker who can run a container with a crafted checkpoint image can execute processes as the root user with full capabilities and no enforced seccomp filters despite restrictive security policies requested by the orchestrator. Additionally, containerd's CRI status reporting reflects the requested configuration rather than the actual restored process state, masking the privilege discrepancy from orchestrators. GKE clusters are not vulnerable by default. GKE node images do not include the criu tool. Implicit container restore is not supported without criu installed on the node. Standard container creation operations in GKE Standard and GKE Autopilot remain unaffected. GKE Autopilot clusters do not support custom runtime configuration and are not impacted. Additionally, Pod snapshots in GKE do not exercise the vulnerable implicit restore codepath. In updated containerd versions (2.3.4 and later, or 2.2.7 and later), implicit restore is disabled by default through the enable_experimental_restore_via_create configuration option. Version 2.4 of containerd will remove this codepath completely in favor of the explicit Pod-level restore API (KEP-5823). Warning: Administrators can manually re-enable the feature in containerd (2.3.4 and later, or 2.2.7 and later) by setting the enable_experimental_restore_via_create configuration option. However, doing so leaves this vulnerability present because containerd cannot enforce destination security policy while it restores the criu process. What should I do? Because GKE does not include the criu binary on default node images, no immediate cluster upgrades or configuration changes are required for default workloads. If you install custom runtime software or node tools on your nodes that include the criu binary, consider taking the following actions as appropriate for your environment: Re-create existing restored containers: Stop, delete, and re-create any running containers that were restored from untrusted checkpoints. Disable experimental restore (containerd 2.3.4 and later, or 2.2.7 and later): If operating nodes with containerd (2.3.4 and later, or 2.2.7 and later) and custom criu installations, ensure the enable_experimental_restore_via_create configuration option remains set to false in your containerd node configuration. Audit containerd logs: If criu is installed, inspect node logs for implicit restore log entries containing search strings such as "Found checkpoint of container" , "Prepared for restore" , or "Restored container successfully" . Monitor deprecation warnings for containerd: Look for the following deprecation warning event: io.containerd.deprecation/cri-create-container-checkpoint-restore . Restrict Pod creation permissions: Ensure Kubernetes RBAC restricts Pod creation permissions ( create pods ) strictly to trusted users and service accounts. Enforce trusted image registries: Ensure that the values for the Pod's image: field reference verified image repositories. Prepare for KEP-5823: Update operational procedures to rely on explicit Pod-level Checkpoint or Restore APIs after they are available in future Kubernetes releases. Medium
A Linux rootkit has been identified targeting F5 BIG-IP APM devices. This rootkit intercepts PHP file loading processes and injects a fileless web shell directly into memory, which allows it to avoid writing malicious code to disk. This technique complicates detection and forensic analysis. The rootkit specifically affects F5 BIG-IP APM environments and leverages in-memory injection to maintain persistence and stealth.
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
North Korean-aligned threat actors have deployed a sophisticated Linux espionage toolkit targeting automotive and media organizations in South Korea. The toolkit embeds a custom backdoor within HAProxy version 2.8.12, enabling stealthy long-term surveillance through HTTP traffic interception and injection. It also includes trojanized Linux tools and a curl-based RAT for remote command execution, credential harvesting, and persistence. Initial access was gained via exploitation of a Groupware login portal vulnerability. The campaign uses watering-hole techniques and mimics legitimate web traffic to evade detection. The activity is attributed to North Korean threat actors, likely linked to Lazarus or APT37 groups. No patch or remediation guidance is provided in the source.
CVE-2026-85656 is an OS command injection vulnerability in the Amazon log4j-cve-2021-44228-hotpatch tool for Amazon Linux. This tool injects a Java agent into running JVM processes to patch the Log4j CVE-2021-44228 vulnerability without restarting the process. The flaw allows a local user to execute arbitrary commands with root privileges if the Java process executable path contains embedded newline characters. Versions up to and including 1.3-8.amzn2 are affected. The issue is fixed in version 1.3-9.amzn2.
Since mid-2025, a Chinese-speaking cybercrime group dubbed Gambling Goblin has conducted a sustained campaign targeting Brazilian organizations, mainly government and educational institutions. The attackers compromise web servers and install malicious Apache modules that stealthily reverse-proxy visitors to phishing pages impersonating trusted app stores. These phishing pages promote online gambling and sports betting while leveraging hijacked high-reputation domains to manipulate search engine rankings and hijack traffic. The group uses a heavily obfuscated Linux toolkit including downloaders, backdoors, credential stealers, and brute-forcers. The infrastructure is scalable and extends beyond Brazil, with parallel phishing networks targeting Vietnamese, Spanish, and English-speaking victims. The phishing infrastructure could be reconfigured to deliver malware directly, posing a latent escalation risk.
TRACE is an open standard for AI runtime attestation governed by the Linux Foundation. Developed by AMD, Intel, Microsoft, OPAQUE, and TII, TRACE provides a hardware-backed, cryptographically verifiable record of AI agent runtime environments, software executed, policies applied, and data classification. It aims to ensure trust and compliance for AI workloads across cloud, confidential computing, and sovereign infrastructure. TRACE combines existing standards into a unified evidence layer to support secure AI deployments. The initiative addresses the need for verifiable evidence as AI agents move into production environments handling sensitive data.
Other noteworthy stories that might have slipped under the radar: Threema DDoS attack, Evooo1Bot Linux botnet, Crypto4A secures top-tier NIST certification. The post In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug appeared first on SecurityWeek .
UAT-10147 is a sophisticated Chinese-speaking intrusion actor deploying a cross-platform backdoor named SPECTRE targeting IIS and Linux servers. SPECTRE integrates advanced post-exploitation features including process injection, credential theft, anti-analysis, and kernel-level EDR bypass via Bring Your Own Virtual Driver (BYOVD) techniques. The campaign combines SEO fraud monetization with custom malware, open-source tools, and AI-assisted development workflows. The Windows variant of SPECTRE uses runtime API resolution and string encryption to evade static detection and includes a comprehensive command set for system control and persistence. The Linux variant incorporates a kernel rootkit with similar advanced capabilities. The actor also uses in-memory web shells and sophisticated evasion methods. No patch or remediation is indicated in the available data.
Cisco Talos identified a Chinese-speaking cybercrime group, UAT-10147, conducting large-scale attacks against Windows and Linux web servers globally. The group exploits publicly disclosed vulnerabilities to gain initial access and integrates AI-driven tools to automate exploitation, reconnaissance, payload generation, validation, and persistence. Targets include organizations in government, education, media, technology, and gaming sectors across Brazil, Bolivia, China, Canada, and Vietnam. The actor deploys malware for SEO fraud and data theft, using multiple open-source offensive frameworks and privilege escalation tools. The infection chains involve multi-stage scripts that evade detection and establish persistence via backdoors and rogue accounts. Talos assesses this as a financially motivated campaign leveraging semi-autonomous AI orchestration to scale complex intrusions efficiently.
Linuxfabrik monitoring_plugins version 6.0.0 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability that could allow attackers to make the server perform unintended requests.
Nodemailer versions 9.0.0 and earlier contain vulnerabilities that allow attackers to read arbitrary files on the server and perform server-side request forgery (SSRF). These issues could lead to unauthorized file access and unintended network requests initiated by the server. The vulnerabilities affect all Nodemailer versions up to and including 9.0.0.
flyto-core version 2.26.7 and earlier contain an arbitrary file write vulnerability that could allow an attacker to write files to the system. No patch or remediation information is currently available, and no exploits are known to be active in the wild. The severity is assessed as medium due to the potential impact of arbitrary file writes.
phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTE_ADDR. A remote unauthenticated attacker can supply an allowed address in one of these headers to impersonate a trusted client and access exposed hostname, kernel, CPU, memory, filesystem, and network-interface information. This issue is fixed in version 3.4.6.
A Cross-Site Request Forgery (CSRF) vulnerability exists in webpack_devserver version 5.2.5 and earlier. This flaw could allow unauthorized commands to be transmitted from a trusted user to the web application.
Probo versions 0.222.2 and earlier contain an Insecure Direct Object Reference (IDOR) vulnerability that allows unauthorized users to access objects or resources by manipulating references. This vulnerability is rated medium severity.
