Authentication Linux Malware 
Tenable
MAY 16, 2024
One of the most common cryptomining threats for cloud environments is the Kinsing malware. Kinsing is a notorious malware family active for several years, primarily targeting Linux-based cloud infrastructure. The Kinsing malware uses different locations to stay undetected and hides itself as a system file.
Tenable
OCTOBER 22, 2024
When Bash, a command interpreter used by Unix-based systems including Linux and macOS, processed this variable, it would execute the function, but also run the arbitrary commands appended after the function definition. Shellshock” quickly became one of the most severe vulnerabilities discovered, comparable to Heartbleed’s potential impact.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
MARCH 14, 2025
Meanwhile, Tenable did a deep dive on DeepSeeks malware-creation capabilities. Other mitigation recommendations offered in the advisory include: Require multifactor authentication for as many services as possible. To get all the details, read the blog DeepSeek Deep Dive Part 1: Creating Malware, Including Keyloggers and Ransomware.
O'Reilly Media - Ideas
APRIL 1, 2025
Torii is an authentication framework for Rust that lets developers decide where to store and manage users authentication data. How do you authenticate AI agents ? Given last months demonstration of Linux booting in a PDF in a browser, we can say that amazing, useless, and fun hacking is thriving.
Tenable
APRIL 8, 2025
Microsoft identified this vulnerability in ransomware deployed by the PipeMagic malware via the group tracked as Storm-2460. According to Microsoft, an attacker would need to be authenticated in order to exploit this vulnerability. It was assigned a CVSSv3 score of 7.8 and is rated as important. and both were rated as important.
Tenable
NOVEMBER 15, 2024
Require phishing-resistant multi-factor authentication for all users and on all VPN connections. For example, the paper suggests 19 questions to ask about AI security systems, organized into seven sub-categories, including authentication and access control; data sanitization; encryption and key management; and security monitoring.
Lacework
MARCH 29, 2022
They never miss an opportunity to cash in, whether they take advantage of common cloud configuration mistakes, target software supply chains, or adapt malware to evade detection. This malicious update opened up Linux systems to receive and run the open-source cryptocurrency miner, XMRig. Linux Malware and the Cloud.
Expert insights. Personalized for you.
127 
Let's personalize your content