A deep dive into Linux’s new mseal syscall

A deep dive into Linux’s new mseal syscall

| | Linux, Research Practice
By Alan Cao If you love exploit mitigations, you may have heard of a new system call named mseal landing into the Linux kernel’s 6.10 release, providing a protection called “memory sealing.” ...
Linux Persistence Mechanisms and How to Find Them

Linux Persistence Mechanisms and How to Find Them

Linux persistence mechanisms are used by an attacker to maintain access to a compromised system, even after reboots or system updates. These allow attackers to regain control of a system without re-exploiting ...

Perfectl Malware

Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions ...

Emulating the Surging Hadooken Malware

AttackIQ has released a new attack graph that emulates the behaviors exhibited by the Hadooken malware during intrusions that abused misconfigurations and critical Remote Code Execution (RCE) vulnerabilities on public-facing Oracle Weblogic ...

Implement DevOps Best Practices for Web Apps on Linux

If you need clarification about why or how you should use Linux in your DevOps project for web app development, then this article is for you.  In an era when DevOps is ...

Building a Secure Linux Environment for Enterprise Applications

  Enterprises today face sophisticated attacks that are often targeted, persistent, and difficult to detect. Keep your Linux environment secure with automated live patching to apply security updates without downtime. Configure firewalls ...

Emulating the Persistent and Stealthy Ebury Linux Malware

AttackIQ has released a new attack graph that seeks to emulate the Tactics, Techniques and Procedures (TTPs) associated with Ebury Linux malware. Despite previous arrests and actions against key perpetrators, Ebury continues ...

Bad Reasons to Update Your Linux Kernel

Linux kernel updates often include performance improvements and hardware compatibility. Regular kernel updates are crucial for patching vulnerabilities and protecting your system from cyberattacks. Live patching eliminates the need to reboot the ...

What is binary compatibility, and what does it mean for Linux distributions?

  Applications are typically tested and guaranteed to function on specific Linux distributions, but may work on others as well. Kernel versions, libraries, and system calls are key factors affecting binary compatibility ...