New Linux Rootkit
ID: 50e0b601-75cb-518d-8a30-405c39eec34c
STIX ID: report--50e0b601-75cb-518d-8a30-405c39eec34c
Feed Name: Schneier on Security
Threat Score
A company released research and a public proof-of-concept for a new Linux rootkit named "Curing" that abuses io_uring to sidestep system-call monitoring, enabling stealthy network and file operations; the announcement links to the GitHub code and promotes the vendor's product as a mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.