Malware & Exploits
CVEs, Damned CVEs, and Statistics
Is your vulnerability scanner showing zero problems with your Linux systems? If so, it’s probably missing something important. Conversely, if it’s suddenly showing hundreds of vulnerabilities, that’s likely an overstatement too. And ...
The Zenbleed Vulnerability: How to Protect Your Zen 2 CPUs
The Zenbleed vulnerability exploits a flaw in the speculative execution mechanism of AMD Zen 2 CPUs. It affects the entire Zen 2 range, even extending to AMD’s EPYC data center chips. As ...
A Blast From The Past: RegreSSHion
It’s summer, and the year so far has been prodigious in high-stakes hacks impacting very high profile companies, like Ticketmaster or Change Healthcare, and sophisticated malicious operations like the one targeting the ...
CISA Alert: Urgent Patching Required for Linux Kernel Vulnerability
Given the active exploitation of this Linux kernel vulnerability, federal agencies are strongly urged to apply patches by June 20, 2024. This vulnerability, tracked as CVE-2024-1086, carries a high-severity rating with a ...
The Growing and Real Threat of Ransomware: Trends, Tactics, and How to Stay Ahead of the Game
Today, the growing and real threat of ransomware is more prevalent than ever. This malicious software is designed to block access to data or systems until a ransom is paid. Over the ...
The Growing and Real Threat of Ransomware: Trends, Tactics, and How to Stay Ahead of the Game
Today, the growing and real threat of ransomware is more prevalent than ever. This malicious software is designed to block access to data or systems until a ransom is paid. Over the ...
Essential Strategies for Recovering from Ransomware Attacks
Ransomware is a serious threat, so be prepared! The average ransom demand is high, and paying doesn’t guarantee recovery. Backups are crucial for recovery, but testing and proper storage are essential.  ...
Hardware Level Vulnerabilities, Revisited
In August of last year, I examined several CPU bugs that posed serious security threats. The mitigations for these vulnerabilities generally involved either incorporating additional instructions or opting for alternative CPU instructions ...
Patches for CVE-2024-1086 for CloudLinux 6h, 7 Users on KernelCare Live
Update April 8th, 2024: Updated ETA for CloudLinux 6h and CloudLinux 7. The KernelCare team is working on deploying a live patch for CVE-2024-1086 for CloudLinux users. A patch has already been ...
Update for KernelCare Live Patches for CVE-2024-1086 in AlmaLinux 8 & 9
The KernelCare team is working on deploying a live patch for CVE-2024-1086 for AlmaLinux 8 and AlmaLinux 9 users. As of April 3, the patches for CVE-2024-1086 are now available in production ...

