Cybersecurity articles tagged #Linux on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/evooo1bot-linux-botnet-beyond-ddos-with-exploits-credential-thefthttps://runtimerebel.com/blog/evooo1bot-linux-botnet-beyond-ddos-with-exploits-credential-theftEvooo1Bot Linux botnet evolves, adding exploitation modules, credential theft, and SOCKS relays, transforming compromised devices into persistent attacker infrastructure.Mon, 17 Aug 2026 16:18:57 GMTLinuxBotnetDDoSCredential TheftEvooo1Bothttps://runtimerebel.com/blog/tontou-cpu-attack-bypasses-spectre-v2-mitigations-on-linuxhttps://runtimerebel.com/blog/tontou-cpu-attack-bypasses-spectre-v2-mitigations-on-linuxNew TONTOU CPU attack bypasses Spectre v2 fixes on Intel and AMD, enabling unprivileged attackers to leak Linux kernel password hashes.Mon, 10 Aug 2026 09:08:38 GMTLinuxTONTOUSpectre V2CPU AttackSide Channelhttps://runtimerebel.com/blog/natjack-attacks-exploiting-nat-trust-in-windows-linux-macoshttps://runtimerebel.com/blog/natjack-attacks-exploiting-nat-trust-in-windows-linux-macosSynack's research reveals NatJack attacks, a new class of NAT exploitation affecting Windows, Linux, and macOS, leveraging trust assumptions.Sun, 09 Aug 2026 00:58:42 GMTWindowsLinuxmacOSNatJackNAThttps://runtimerebel.com/blog/cve-2026-64561-zapscape-kvm-flaw-allows-guest-vm-escapehttps://runtimerebel.com/blog/cve-2026-64561-zapscape-kvm-flaw-allows-guest-vm-escapeAnalyze CVE-2026-64561, a KVM shadow MMU vulnerability dubbed Zapscape allowing L1 guest VM escape to Linux hosts. Learn mitigation steps.Fri, 07 Aug 2026 02:08:24 GMTCVE-2026-64561LinuxKernelVirtualizationVulnerabilityhttps://runtimerebel.com/blog/ssh-botnet-reconnaissance-before-linux-cryptominer-deploymenthttps://runtimerebel.com/blog/ssh-botnet-reconnaissance-before-linux-cryptominer-deploymentAn SSH botnet performs extensive hardware and system reconnaissance on Linux targets before deploying an optimized cryptocurrency miner. Weak credentials exploited.Thu, 30 Jul 2026 02:32:56 GMTSSH BotnetCryptominingLinuxXMRigPnscanBrute Forcehttps://runtimerebel.com/blog/uefi-shim-bootloader-vulnerabilities-secure-boot-blind-spothttps://runtimerebel.com/blog/uefi-shim-bootloader-vulnerabilities-secure-boot-blind-spotNearly a dozen vulnerable UEFI shim bootloaders remained trusted for years, allowing attackers to bypass Secure Boot for persistent malware and rootkit deployment.Thu, 16 Jul 2026 02:43:41 GMTUEFISecure BootBootloaderSupply Chain AttackRootkitLinuxhttps://runtimerebel.com/blog/linux-process-specific-http-proxying-tools-and-analysis-gapshttps://runtimerebel.com/blog/linux-process-specific-http-proxying-tools-and-analysis-gapsExplores the utility of process-specific HTTP proxying for Linux debugging and reverse engineering, highlighting the absence of a generic solution akin to Proxifier.Thu, 21 May 2026 20:44:33 GMTLinuxHTTP ProxyReverse EngineeringDebuggingSecurity Toolshttps://runtimerebel.com/blog/linux-kernel-dirty-frag-cve-2024-26610-lpe-vulnerability-analysishttps://runtimerebel.com/blog/linux-kernel-dirty-frag-cve-2024-26610-lpe-vulnerability-analysisTechnical analysis of the Dirty Frag Linux kernel vulnerability (CVE-2024-26610), exploring its impact on IPv4 fragmentation and mitigation strategies.Fri, 08 May 2026 08:40:45 GMTLinuxDirty FragCVE-2024-26610Privilege EscalationLPEKernel Securityhttps://runtimerebel.com/blog/dirty-frag-linux-kernel-zero-day-enables-local-privilege-escalationhttps://runtimerebel.com/blog/dirty-frag-linux-kernel-zero-day-enables-local-privilege-escalationThe Dirty Frag zero-day vulnerability allows local attackers to gain root access on major Linux distributions via an exploit in kernel fragmentation handling.Fri, 08 May 2026 08:38:16 GMTLinuxKernelDirty FragPrivilege EscalationZero-Dayhttps://runtimerebel.com/blog/ai-assisted-scan-uncovers-9-year-old-linux-vulnerabilityhttps://runtimerebel.com/blog/ai-assisted-scan-uncovers-9-year-old-linux-vulnerabilityAn AI-assisted software scan revealed a 9-year-old Linux vulnerability with a 10-line proof-of-concept exploit. Learn about its implications and essential mitigation.Fri, 01 May 2026 00:55:21 GMTLinuxVulnerabilityAI Assisted DiscoveryProof of ConceptPatchinghttps://runtimerebel.com/blog/axios-npm-package-hijacked-cross-platform-malware-distributionhttps://runtimerebel.com/blog/axios-npm-package-hijacked-cross-platform-malware-distributionAnalysis of the Axios npm package hijack distributing remote access trojans to Linux, Windows, and macOS systems. Learn to protect your software supply chain.Tue, 31 Mar 2026 16:29:10 GMTAxiosNPMSupply Chain AttackRemote Access TrojanMalwareJavaScriptLinuxWindowsmacOShttps://runtimerebel.com/blog/n8n-flaw-exploitation-slopoly-malware-apparmor-lpe-key-threatshttps://runtimerebel.com/blog/n8n-flaw-exploitation-slopoly-malware-apparmor-lpe-key-threatsAnalysis of recent cybersecurity threats: actively exploited N8n flaw, Slopoly malware, Linux AppArmor root privilege vulnerability, and Telus Digital breach.Fri, 13 Mar 2026 16:20:49 GMTN8nSlopolyMalwareAppArmorLinuxPrivilege EscalationData BreachTelus DigitalExploitationhttps://runtimerebel.com/blog/chinese-cyber-threat-persistent-espionage-in-critical-asian-sectorshttps://runtimerebel.com/blog/chinese-cyber-threat-persistent-espionage-in-critical-asian-sectorsAn undefined Chinese-speaking actor conducts long-term cyber espionage against critical Asian sectors using custom malware and living-off-the-land binaries.Mon, 09 Mar 2026 16:35:16 GMTChinese APTEspionageWindowsLinuxLOTLCustom MalwareCritical InfrastructureThreat Actorhttps://runtimerebel.com/blog/zero-day-linux-kernelhttps://runtimerebel.com/blog/zero-day-linux-kernelA newly discovered zero-day vulnerability in the Linux kernel's netfilter subsystem allows local privilege escalation on systems running kernel versions 5.14 through…Mon, 15 Jan 2024 00:00:00 GMTLinuxKernelZero-DayPrivilege EscalationCVE