Thunderbird Linux Signing Key Revoked by Mozilla
Thunderbird for Linux is affected by the revocation of Mozilla's signing key. Users who manually verify signatures must import the new key…
Tag: Linux
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Accidental Exposure in Private Repo
Mozilla has revoked the cryptographic signing key used for Firefox and Thunderbird downloads on Linux after an unencrypted copy of the key…
Sliver C2 Framework Deployed via Malicious npm Packages
Sliver, an open-source command-and-control (C2) framework, is deployed as the final payload on Linux systems in the malicious npm campaign. The Linux…
18-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Let Local Users Gain Root and Escape Containers
A use-after-free vulnerability in Linux's SCTP networking code, tracked as CVE-2026-64564 and named SCTPhantom, could allow local users to gain root privileges…
Linux Kernel SCTP Vulnerability
The Linux kernel's SCTP implementation contains a use-after-free flaw (CVE-2026-64564) that can be exploited for local privilege escalation and container escape. Patches…
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
CentOS Stream 9 Targeted by CVE-2026-53264 Exploit
The public exploit for CVE-2026-53264 was demonstrated on CentOS Stream 9, requiring specific kernel configurations and unprivileged user namespaces. Users should apply…
DevMan Ransomware: Technical Analysis and Capabilities
DevMan ransomware is a locker that targets Windows, ESXi, and Linux systems. It uses ChaCha20-Poly1305 encryption, fully encrypting files up to 3…
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
The operators of the DevMan ransomware-as-a-service (RaaS) scheme maintain a dedicated web platform that offers affiliates the ability to build payloads, oversee…
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITYSYSTEM on Microsoft's production image-processing workers, and as root on…