RuntimeRebel — #Linux SecurityCybersecurity articles tagged #Linux Security on RuntimeRebel.https://runtimerebel.comCVE-2024-6387: OpenSSH regreSSHion RCE — Mitigation Guidehttps://runtimerebel.com/blog/cve-2024-6387-openssh-regresshion-rce-mitigation-guidehttps://runtimerebel.com/blog/cve-2024-6387-openssh-regresshion-rce-mitigation-guideCritical analysis of CVE-2024-6387 (regreSSHion) in OpenSSH. Learn technical details of the signal handler race condition and how to defend Linux systems.Wed, 24 Jun 2026 09:23:43 GMTCVE-2024-6387OpenSSHregreSSHionLinux SecurityRCELinux Process Name Masquerading: Analyzing T1036 Obfuscationhttps://runtimerebel.com/blog/linux-process-name-masquerading-analyzing-t1036-obfuscationhttps://runtimerebel.com/blog/linux-process-name-masquerading-analyzing-t1036-obfuscationExplore the technical methods behind Linux process name masquerading (MITRE ATT&CK T1036) used by actors like Velvet Ant to evade detection.Wed, 24 Jun 2026 09:23:19 GMTT1036Linux SecurityVelvet AntProcess MasqueradingObfuscationLinux Vulnerabilities and Defender Zero-Days: Weekly Threat Recaphttps://runtimerebel.com/blog/linux-vulnerabilities-and-defender-zero-days-weekly-threat-recaphttps://runtimerebel.com/blog/linux-vulnerabilities-and-defender-zero-days-weekly-threat-recapWeekly intelligence recap covering Linux flaws, Microsoft Defender zero-days, router botnets, and supply chain compromises targeting developer toolchains.Mon, 25 May 2026 16:48:57 GMTLinux SecurityMicrosoft DefenderSupply Chain SecurityBotnetsFlipper One: The Evolution of Linux-Based Hardware Pentesting Toolshttps://runtimerebel.com/blog/flipper-one-the-evolution-of-linux-based-hardware-pentesting-toolshttps://runtimerebel.com/blog/flipper-one-the-evolution-of-linux-based-hardware-pentesting-toolsFlipper Devices announces the Flipper One, an open Linux platform. Analyze the security implications and defensive requirements for this modular hacking tool.Thu, 21 May 2026 13:20:04 GMTFlipper OneHardware HackingPenetration TestingPhysical SecurityLinux SecurityCVE-2026-31431: CISA Warns of Linux Local Privilege Escalation Exploithttps://runtimerebel.com/blog/cve-2026-31431-cisa-warns-of-linux-local-privilege-escalation-exploithttps://runtimerebel.com/blog/cve-2026-31431-cisa-warns-of-linux-local-privilege-escalation-exploitCISA adds CVE-2026-31431 to its KEV catalog following active exploitation of a Linux local privilege escalation flaw. Learn how to mitigate root access risks.Sun, 03 May 2026 08:40:00 GMTCVE-2026-31431Linux SecurityCISA KEVPrivilege EscalationCookie-Controlled PHP Web Shells Evade Detection on Linux Servershttps://runtimerebel.com/blog/cookie-controlled-php-web-shells-evade-detection-on-linux-servershttps://runtimerebel.com/blog/cookie-controlled-php-web-shells-evade-detection-on-linux-serversMicrosoft researchers warn of stealthy PHP web shells on Linux using HTTP cookies for command execution and cron jobs for long-term persistence.Sat, 04 Apr 2026 00:36:49 GMTPhp Web ShellLinux SecurityMicrosoft DefenderPersistence MechanismsCron Job ExploitationGSocket Backdoor Analysis: Malicious Bash Script Delivery and Impacthttps://runtimerebel.com/blog/gsocket-backdoor-analysis-malicious-bash-script-delivery-and-impacthttps://runtimerebel.com/blog/gsocket-backdoor-analysis-malicious-bash-script-delivery-and-impactAnalysis of a malicious Bash script deploying the GSocket backdoor for persistent access, bypassing firewalls through advanced NAT traversal techniques.Fri, 20 Mar 2026 12:19:53 GMTGsocketBash MalwarePersistenceLinux SecurityNat TraversalUbuntu CVE-2026-3888: Privilege Escalation via systemd Timing Flawhttps://runtimerebel.com/blog/ubuntu-cve-2026-3888-privilege-escalation-via-systemd-timing-flawhttps://runtimerebel.com/blog/ubuntu-cve-2026-3888-privilege-escalation-via-systemd-timing-flawA high-severity flaw in Ubuntu 24.04+ allows local attackers to gain root access via a systemd cleanup timing exploit tracked as CVE-2026-3888.Wed, 18 Mar 2026 12:24:05 GMTUbuntuSystemdCVE-2026-3888Privilege EscalationLinux Security