Linux

Bash Shellshock bug: More attacks, more patches

September 29, 2014

As vendors scramble to issue patches for the GNU Bash Shellshock bug and companies rush to implement them, attackers around the world are probing systems for the hole it …

Bash “Shellshock” bug: Who needs to worry?

September 26, 2014

As expected, attackers have begun exploiting the GNU Bash “Shellshock” remote code execution bug (CVE-2014-6271) to compromise systems and infect them with …

Critical Bash bug opens Unix, Linux, OS X systems to attacks

September 25, 2014

The Bash “shellshock” flaw (CVE-2014-6271) was discovered last week by Unix/Linux specialist Stephane Chazelas, and its existence was made public on Wednesday. It …

Kali NetHunter turns Nexus devices into portable hacking tools

September 24, 2014

Offensive Security, the security training company behind Kali Linux, the popular Debian-based OS designed for digital forensics and penetration testing, and Kali community …

Linux systems infiltrated and controlled in a DDoS botnet

September 3, 2014

Akamai Technologies is alerting enterprises to a high-risk threat of IptabLes and IptabLex infections on Linux systems. Malicious actors may use infected Linux systems to …

Critical de-anonymization 0-days found in Tails

July 22, 2014

Tails, the security-focused Debian-based Linux distribution favoured by Edward Snowden, journalists and privacy-minded users around the world, sports a number of critical …

Mayhem malware ropes Linux, UNIX servers into botnets

July 18, 2014

A new malware that researchers have dubbed Mayhem is being used to target Linux and Unix web servers and has so far compromised over 1,400 Linux and FreeBSD servers around the …

Exploiting wildcards on Linux

June 27, 2014

DefenseCode released an advisory in which researcher Leon Juranic details security issues related to using wildcards in Unix commands. The topic has been talked about in the …

Critical bug in GnuTLS crypto library could allow malicious code execution

June 4, 2014

Another critical bug in an open source SSL/TLS (and DTLS) cryptographic library has been discovered and patched last week. The affected library is GnuTLS, and is used in a …

Record month for Linux Trojans

May 19, 2014

If you think that you are protected from malware if you use Linux, think again, warn researchers from AV manufacturer Dr. Web, who identified and examined a record-high number …

GnuTLS library flaw opens way for MitM attacks

March 5, 2014

A critical cryptographic bug similar to the one recently discovered in iOS and OS X has been revealed to exist in the GnuTLS code library, widely used in open source software …

OpenSUSE forums defaced via unknown vBulletin 0-day

January 8, 2014

The official forums of the openSUSE Linux distribution have been hacked and defaced by a Pakistani hacker that goes by the handle “H4x0r HuSsY.” According to THN, …