Featured Linux Articles - Page 3

Discover LinuxSecurity Features

What Is a Use After Free (UAF) Vulnerability in a Linux Server?What Is a Use After Free (UAF) Vulnerability in a Linux Server?What Is a Use After Free (UAF) Vulnerability in a Linux Server? What Is a Use After Free (UAF) Vulnerability in a Linux Server?What Is a Use After Free (UAF) Vulnerability in a Linux Server?What Is a Use After Free (UAF) Vulnerability in a Linux Server?

What Is a Use After Free (UAF) Vulnerability in a Linux Server?

Ever wonder how a seemingly minor bug in memory management can crack open a door for attackers to slip through and compromise your Linux server? Meet the use after free (UAF) vulnerability—an elusive and dangerous class of memory corruption flaw that has plagued Linux systems (and others) for years.

Brittany Day
Aug 14, 2025

National Security & AI at DEFCON 2025: Where Code Meets CrisisNational Security & AI at DEFCON 2025: Where Code Meets CrisisNational Security & AI at DEFCON 2025: Where Code Meets Crisis National Security & AI at DEFCON 2025: Where Code Meets CrisisNational Security & AI at DEFCON 2025: Where Code Meets CrisisNational Security & AI at DEFCON 2025: Where Code Meets Crisis

National Security & AI at DEFCON 2025: Where Code Meets Crisis

DEFCON isn’t your average tech conference. It’s not about launching flashy products or corporate handshakes—it’s about putting reality under a microscope and asking big, uncomfortable questions. This year, the 2025 DEFCON hacking conference had a sharp focus: securing the digital backbone of the nation. And let’s be honest, seeing how razor-thin those defenses sometimes are when stacked against evolving threats can make even the most seasoned sysadmin bite their nails.

Brittany Day
Aug 13, 2025

What is a CSRF Attack?What is a CSRF Attack?What is a CSRF Attack? What is a CSRF Attack?What is a CSRF Attack?What is a CSRF Attack?

What is a CSRF Attack?

CSRF, or Cross-Site Request Forgery, is one of those vulnerabilities that’s deceptively simple but can wreak havoc if left unaddressed. Think about it: your users are logged into a web interface—maybe an admin portal for monitoring, a hosted application, or an internal management dashboard. Now imagine an attacker tricking that user—or their browser—into making unintended requests, like issuing commands, changing configurations, or transferring sensitive data. The scary part? It’s all done without the user even realizing it.

Brittany Day
Aug 09, 2025

Contribute to LinuxSecurity

Don’t sit on the sidelines of history. Join the Linux Security community
and write real news & articles about Linux that matters the most.

Contribute Now

What Is an SQL Injection Attack?What Is an SQL Injection Attack?What Is an SQL Injection Attack? What Is an SQL Injection Attack?What Is an SQL Injection Attack?What Is an SQL Injection Attack?

What Is an SQL Injection Attack?

An SQL injection (SQLi) attack is one of those vulnerabilities that’s deceptively simple in concept yet devastating in its impact. It’s a family of security flaws tied to how applications interact with a relational database. In plain terms: if an application doesn't properly handle user-supplied input (think login fields, search bars, or even URL parameters), an attacker can manipulate SQL queries to execute unintended commands on the database. This can range from dumping entire tables of sensitive data to modifying, corrupting, or destroying it altogether.

Brittany Day
Aug 08, 2025

Hashcat 7.0.0: Redefining Password Recovery & Security on LinuxHashcat 7.0.0: Redefining Password Recovery & Security on LinuxHashcat 7.0.0: Redefining Password Recovery & Security on Linux Hashcat 7.0.0: Redefining Password Recovery & Security on LinuxHashcat 7.0.0: Redefining Password Recovery & Security on LinuxHashcat 7.0.0: Redefining Password Recovery & Security on Linux

Hashcat 7.0.0: Redefining Password Recovery & Security on Linux

Every now and then, a tool you already rely on gets an upgrade that makes you stop what you’re doing and reevaluate how you’ve been using it. That’s exactly the vibe Hashcat 7.0.0 is bringing to the table. If you’re a Linux admin—or anyone remotely serious about infosec—you already know Hashcat’s reputation as the Swiss Army knife of password recovery. It’s fast, it’s versatile, and frankly, it’s intimidating in its scope. But with this 7.0.0 release, we’re not just getting your standard performance tweaks or a few shiny new features. What we’re seeing here is a recalibration of what’s possible for admins juggling the dual responsibilities of securing systems and recovering credentials.

Brittany Day
Aug 06, 2025

What Is a RCE Exploit?What Is a RCE Exploit?What Is a RCE Exploit? What Is a RCE Exploit?What Is a RCE Exploit?What Is a RCE Exploit?

What Is a RCE Exploit?

If you're managing Linux systems, you already know how quickly things can spiral when Linux vulnerabilities are left unchecked. But there’s one particularly nasty type you can’t ignore: Remote Code Execution, or RCE.

Brittany Day
Aug 05, 2025

What Is An XSS Vulnerability?What Is An XSS Vulnerability?What Is An XSS Vulnerability? What Is An XSS Vulnerability?What Is An XSS Vulnerability?What Is An XSS Vulnerability?

What Is An XSS Vulnerability?

If you’re running servers, maintaining web apps, or just spending a lot of time thinking about the integrity of systems, cross-site scripting (or XSS) probably isn’t news to you. But the reality is, XSS vulnerabilities are everywhere—lingering quietly in applications, web interfaces, and console dashboards used by Linux systems daily.

Brittany Day
Aug 02, 2025

Hidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image DeliveryHidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image DeliveryHidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image Delivery Hidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image DeliveryHidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image DeliveryHidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image Delivery

Hidden in Plain Sight: Koske Linux Malware’s Stealthy Panda Image Delivery

The days of straightforward Linux security threats—malware you could spot with a cursory glance at the logs—are fading fast. Meet "Koske," a new breed of malware that has arrived quietly but with an alarming sophistication. What’s making waves here isn’t just its technical prowess in exploiting misconfigured JupyterLab apps, but how it’s delivering its payload—hidden in images of pandas. Yep, pandas. But don’t let the friendly wildlife fool you; this is stealthy malware designed to persist, adapt, and dodge detection like nothing else out there.

Brittany Day
Aug 01, 2025

What Is a Denial of Service (DoS) Attack? Understanding the Unseen ThreatWhat Is a Denial of Service (DoS) Attack? Understanding the Unseen ThreatWhat Is a Denial of Service (DoS) Attack? Understanding the Unseen Threat What Is a Denial of Service (DoS) Attack? Understanding the Unseen ThreatWhat Is a Denial of Service (DoS) Attack? Understanding the Unseen ThreatWhat Is a Denial of Service (DoS) Attack? Understanding the Unseen Threat

What Is a Denial of Service (DoS) Attack? Understanding the Unseen Threat

Imagine this: you're midway through deploying critical patches on your Linux servers when you notice something strange. Traffic to one of your services spikes dramatically—far beyond what's reasonable for your infrastructure. Connections time out. Load skyrockets. Processes start getting killed left and right. Your CPU is pegged, your memory is exhausted, and your users? They're locked out. This isn’t a friendly traffic surge or a misconfigured job. It’s a Denial of Service (DoS) attack—a blunt but effective weapon designed to hammer your services until they buckle under the strain.

Brittany Day
Aug 01, 2025

Soco404: Linux Cryptomining Campaign Masquerades as 404 Error PagesSoco404: Linux Cryptomining Campaign Masquerades as 404 Error PagesSoco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages Soco404: Linux Cryptomining Campaign Masquerades as 404 Error PagesSoco404: Linux Cryptomining Campaign Masquerades as 404 Error PagesSoco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages

Soco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages

Let’s talk about something that’s been slipping under the radar: Soco404. If you manage Linux systems in any capacity—or just spend time keeping production environments stable in the face of constant threats—this discovery warrants your immediate attention. What you’ve got here is a sneaky cryptomining campaign that digs into misconfigured PostgreSQL databases, outdated Apache Tomcat servers, and poorly secured cloud setups. The reason it’s making waves? It pulls off its moves while hiding behind fake 404 error pages.

Brittany Day
Jul 28, 2025

CHAOS RAT in AUR: When Trust in Open-Source Goes Too FarCHAOS RAT in AUR: When Trust in Open-Source Goes Too FarCHAOS RAT in AUR: When Trust in Open-Source Goes Too Far CHAOS RAT in AUR: When Trust in Open-Source Goes Too FarCHAOS RAT in AUR: When Trust in Open-Source Goes Too FarCHAOS RAT in AUR: When Trust in Open-Source Goes Too Far

CHAOS RAT in AUR: When Trust in Open-Source Goes Too Far

If you’ve spent any time managing Arch Linux systems, you’re probably familiar with the Arch User Repository (AUR). It’s an undeniable powerhouse for software installation, delivering thousands of packages maintained by a vibrant and tech-savvy community. It’s open, flexible, and lets you grab niche tools and utilities with relative ease—but that openness is a double-edged sword. As of July 2025, it’s proven again why "trust, but verify" should be your mantra for community-maintained repositories.

Brittany Day
Jul 26, 2025

H2Miner Botnet Expands Threats to Linux, Windows, ContainersH2Miner Botnet Expands Threats to Linux, Windows, ContainersH2Miner Botnet Expands Threats to Linux, Windows, Containers H2Miner Botnet Expands Threats to Linux, Windows, ContainersH2Miner Botnet Expands Threats to Linux, Windows, ContainersH2Miner Botnet Expands Threats to Linux, Windows, Containers

H2Miner Botnet Expands Threats to Linux, Windows, Containers

Let’s face it: threat actors are getting smarter, and malware isn’t just for your typical Windows clickbait anymore. In recent years, the H2Miner botnet has gone from a single-purpose miner to a Swiss Army knife of exploits, targeting Linux systems, Windows machines, and even containers. If you’re managing Linux environments or containerized workloads, this is the kind of threat that'll keep you up at night—not because it’s flashy, but because it’s sneaky, persistent, and laser-focused on chewing up your infrastructure to mine Monero.

Brittany Day
Jul 18, 2025

The Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best PracticesThe Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best PracticesThe Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best Practices The Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best PracticesThe Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best PracticesThe Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best Practices

The Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best Practices

It’s no secret: the Linux kernel isn’t just the foundation of your favorite open-source operating system—it’s the hidden backbone of modern computing. Servers, embedded IoT devices, cloud infrastructure, and supercomputers all rely on it. In 2025, Linux administrators and security professionals face an ecosystem that’s both more secure and more dangerous. While kernel developers are building robust defenses, adversaries are working just as hard to discover new weaknesses, leveraging advances like AI and even nascent quantum computing to push attack vectors further than ever before.

Brittany Day
Jul 16, 2025

Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks

Ransomware’s New Frontier: Linux Systems Face Intensifying Attacks

For a long time, Linux carried an aura of impenetrable security. It was the backbone of choice for enterprise workloads, revered for its reliability, open-source freedoms, and comparatively low-profile status compared to Windows. But things are changing—and fast. Ransomware gangs have been eyeing Linux environments, and they’re far from idle.

Brittany Day
Jul 15, 2025

Active Wing FTP Exploits Demand Immediate Action from Linux AdminsActive Wing FTP Exploits Demand Immediate Action from Linux AdminsActive Wing FTP Exploits Demand Immediate Action from Linux Admins Active Wing FTP Exploits Demand Immediate Action from Linux AdminsActive Wing FTP Exploits Demand Immediate Action from Linux AdminsActive Wing FTP Exploits Demand Immediate Action from Linux Admins

Active Wing FTP Exploits Demand Immediate Action from Linux Admins

Picture this: It’s July 2, 2025, and you’re unwinding from a long day, only to hear about a zero-day vulnerability being actively exploited. If you’re running Wing FTP Server on Linux—or any other OS, for that matter—you might’ve just lucked into a sleepless night. CVE-2025-47812 is here, and it’s not messing around. Attackers are already out there, leveraging it to turn vulnerable servers into their playgrounds. If your servers are part of a production setup, the stakes are even higher.

Brittany Day
Jul 14, 2025

Apache HTTP Server 2.4.64 security patch: major threats resolved and risksApache HTTP Server 2.4.64 security patch: major threats resolved and risksApache HTTP Server 2.4.64 security patch: major threats resolved and risks Apache HTTP Server 2.4.64 security patch: major threats resolved and risksApache HTTP Server 2.4.64 security patch: major threats resolved and risksApache HTTP Server 2.4.64 security patch: major threats resolved and risks

Apache HTTP Server 2.4.64 security patch: major threats resolved and risks

Apache HTTP Server 2.4.64 is here, and it’s carrying quite a load of security fixes that Linux admins absolutely need to pay attention to. Whether your Apache deployment is running simple HTTP workloads or juggling SSL/TLS-heavy configurations, let’s be clear—if you're on anything between 2.4.0 and 2.4.63, your system just got a target painted on it.

Brittany Day
Jul 11, 2025

BERT: Cross-Platform Ransomware Targeting Linux and ESXi SystemsBERT: Cross-Platform Ransomware Targeting Linux and ESXi SystemsBERT: Cross-Platform Ransomware Targeting Linux and ESXi Systems BERT: Cross-Platform Ransomware Targeting Linux and ESXi SystemsBERT: Cross-Platform Ransomware Targeting Linux and ESXi SystemsBERT: Cross-Platform Ransomware Targeting Linux and ESXi Systems

BERT: Cross-Platform Ransomware Targeting Linux and ESXi Systems

Ransomware is nothing new to us as Linux admins and infosec folks—it’s pretty much part of the modern threat landscape now. But when I say "BERT ransomware," you may want to sit up and pay closer attention. Officially tracked as "Water Pombero" by Trend Micro, BERT isn’t just another ransomware strain making a splash. It’s a calculated, cross-platform threat that specifically hones in on both Windows and Linux systems. Oh, and for those of you running ESXi in your virtualized data centers? BERT has you in its crosshairs, too.

Brittany Day
Jul 09, 2025

Parrot OS 6.4 Release Overview: Key Updates and Features for AdminsParrot OS 6.4 Release Overview: Key Updates and Features for AdminsParrot OS 6.4 Release Overview: Key Updates and Features for Admins Parrot OS 6.4 Release Overview: Key Updates and Features for AdminsParrot OS 6.4 Release Overview: Key Updates and Features for AdminsParrot OS 6.4 Release Overview: Key Updates and Features for Admins

Parrot OS 6.4 Release Overview: Key Updates and Features for Admins

For those of us who’ve been following Parrot OS through its gradual evolution, the launch of version 6.4 feels less like a routine update and more like a defining moment. It’s not just a refresh of the security-oriented Linux distro; it’s a glimpse into the next phase of its maturity, with tools, optimizations, and system-level refinements that elevate its place in the arsenal of infosec professionals and Linux enthusiasts alike.

Brittany Day
Jul 08, 2025

Hardening SSH Configurations Against Proxy Attacks on LinuxHardening SSH Configurations Against Proxy Attacks on LinuxHardening SSH Configurations Against Proxy Attacks on Linux Hardening SSH Configurations Against Proxy Attacks on LinuxHardening SSH Configurations Against Proxy Attacks on LinuxHardening SSH Configurations Against Proxy Attacks on Linux

Hardening SSH Configurations Against Proxy Attacks on Linux

Let’s be honest—your Linux server isn’t the fortress you hope it is if your SSH setup isn’t locked down tight. Recently, security teams have been tracking a spike in attacks, and it’s not just the usual malware game we’ve seen before. Attackers are going low-key and crafty, exploiting weak SSH security to install legitimate tools like TinyProxy and Sing-box to turn compromised servers into proxy nodes. These tools are completely normal when used properly, but they’re a dream for attackers who want to hide their tracks or sell access to your system.

Brittany Day
Jul 03, 2025

The Rise of Rust-Based Malware: Memory Safety’s Double-Edged SwordThe Rise of Rust-Based Malware: Memory Safety’s Double-Edged SwordThe Rise of Rust-Based Malware: Memory Safety’s Double-Edged Sword The Rise of Rust-Based Malware: Memory Safety’s Double-Edged SwordThe Rise of Rust-Based Malware: Memory Safety’s Double-Edged SwordThe Rise of Rust-Based Malware: Memory Safety’s Double-Edged Sword

The Rise of Rust-Based Malware: Memory Safety’s Double-Edged Sword

When Rust emerged as the "memory-safe" poster child of programming languages, it didn’t take long for its influence to spread. From systems programming to infrastructure tools, Rust is being embraced in areas long dominated by C and C++. It’s cleaner, safer, and the way forward for Linux kernel modules, system utilities, and network drivers.

Brittany Day
Jul 03, 2025