Linuxsecurity and Linuxiac (to some extent Linuxjournal) are still going, but for how much longer?

Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise.

OpenSSH authentication bypass threatens Alpine Linux servers under specific conditions. Learn which systems are affected, how to patch, and reduce exposure.

TL;DR CVE-2026-98432 is a Linux kernel TCP flaw rated CVSS 9.8. Canonical has now placed fixes in the -proposed pocket for Ubuntu 22.04 LTS and newer. The bug sits in how the kernel sets up IPv4 TCP connections. Every kernel since version 4.4 carries this Linux kernel TCP flaw. This flaw is a use-after-free race that "can lead to remote code execution." Ubuntu's fixes are still in testing, and older releases wait for a later fix.

Linux server hardening in 12 proven steps for Ubuntu, Debian, RHEL and Rocky: lock down SSH, firewall, kernel and audit logs, with a command to prove each.

Microsoft Defender for Endpoint now supports Linux desktops in public preview. See supported distros, licensing, features, and who should use it.

At a Glance Malware Family SysGoRAT malware (cross-platform Go remote access trojan), PHP web shells, and AI-generated bash and PHP scripts Threat Actor Confirmed as cluster CL-UNK-1211; nation-state versus cybercrime affiliation remains undetermined Target / Victims Government entities and state-affiliated Linux, mail, and database infrastructure (active from October 2025 to April 2026) Delivery Vector

Black Sand Beacon a lightweight, memory-resident micro beacon or implant for the LazyOwn RedTeam Framework is the first offensive platform to deliver true native BOF (Beacon Object File) support fo...

A Linux host security scanner with a native CLI and desktop GUI — SSH/kernel/systemd hardening checks, real ClamAV scanning, file-integrity monitoring, and continuous background monitoring. - vieta...

Ein KMU mit rund 20 Mitarbeitenden. Firewall, Virenschutz, Backup-Lösung, Microsoft 365, die IT betreut ein externer Dienstleister.

AnyDesk Linux AnyPwn Exploit Grants Remote Root Access Bypassing the Confirmation Prompt The standard remote access confirmation window has proven entirely ineffectual against a critical flaw. This severe vulnerability triggers well before any prompt reaches the user. The V12 research team recently published a working AnyPwn exploit tailored for AnyDesk on Linux systems. This sophisticated exploit enables root-level command execution without necessitating a password or connection authorization.

TL;DR CERT/CC and maintainers at mogh.tech disclosed CVE-2026-110005, a critical OS command injection flaw in the Komodo Periphery agent. The Komodo Periphery vulnerability carries a CVSS 3.1 base score of 9.9 and lets authenticated low-privileged users run root commands. Administrators must update all deployments to version 2.3.0 immediately. Why CVE-2026-110005 Matters for Docker Infrastructure Self-hosted and multi-server environments use the open-source Komodo platform to manage Docker containers.

TL;DR Researchers at V12 released public proof-of-concept exploit code for a pre-auth remote code execution flaw in AnyDesk for Linux. The AnyDesk RCE vulnerability, nicknamed AnyPwn, grants root command execution before a user approves the remote session. AnyDesk fixed the bug in version 8.0.3. Rick de Jager of the V12 security team found the flaw and published the PoC exploit code on GitHub…