Hackers can now bypass Linux security thanks to terrifying new Curing rootkit

[Kaz]

  Quote

 

Most Linux users assume their security tools will catch bad actors before damage is done -- but sadly, new research suggests that confidence may be misplaced. You see, ARMO, the company behind Kubescape, has uncovered what could be one of the biggest blind spots in Linux security today. The company has released a working rootkit called “Curing” that uses io_uring, a feature built into the Linux kernel, to stealthily perform malicious activities without being caught by many of the detection solutions currently on the market.

At the heart of the issue is the heavy reliance on monitoring system calls, which has become the go-to method for many cybersecurity vendors. The problem? Attackers can completely sidestep these monitored calls by leaning on io_uring instead. This clever method could let bad actors quietly make network connections or tamper with files without triggering the usual alarms.

 

Expand  

Hackers can now bypass Linux security thanks to terrifying new Curing rootkit

BETANEWS.COM

---

Most Linux users assume their security tools will catch bad actors before damage is done — but sadly, new research suggests that...

 

[schuck6566]

Just in time for those of us that are switching from Windows10 in August/September to be able to take advantage of.

[GanjaSMK]

  On 26/04/2025 at 16:03, schuck6566 said:

Just in time for those of us that are switching from Windows10 in August/September to be able to take advantage of.

Expand  

 

Wait, you mean you're not going to do Windows 11?  

 

Say it ain't so! 

[schuck6566]

  On 28/04/2025 at 21:13, GanjaSMK said:

 

Wait, you mean you're not going to do Windows 11?  

 

Say it ain't so! 

Expand  

lol,the i7-2600 CPU my wife is running doesn't measure up to Microsoft s expectations.

[GanjaSMK]

So much for backwards compatibility... looking @ you MSFT....