Malware & Exploits Archives - Page 3 of 8 - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Critical Vulnerability CVE-2024-4577: Understanding the...

Introduction   A critical vulnerability in PHP for Windows (CVE-2024-4577) has become a significant cybersecurity concern since its disclosure in June 2024. With a CVSS score of 9.8, this high-severity...

The Linux Kernel CVE Flood...

Almost a year ago, the Linux Kernel team became a CVE Numbering Authority (CNA), marking a significant shift in how kernel vulnerabilities are tracked and disclosed. Far from being a...

RegreSSHion: Why a Six-Month-Old Vulnerability...

Cybersecurity professionals know that vulnerabilities rarely fade into obscurity just because they’re patched or reported. The release of a public proof of concept (PoC) can breathe new life into old...

The Great Kernel CVE Flood...

“We’re just doing what cve.org wants us to do” was repeated multiple times by Greg K-H in a recent presentation. Earlier this year, the Kernel team’s new CNA (CVE Numbering...

From Crisis to Confidence: Navigating...

  Isolating infected systems immediately helps prevent ransomware from spreading across networks. Regular, automated backups stored offline are essential for recovering from ransomware incidents.   Proactive security measures, like live patching...

The Cost of Hardware-Level Security...

In recent years, the steady influx of hardware-level vulnerabilities, like Heartbleed, Spectre, Rowhammer, and a host of others, has put every CPU vendor under scrutiny. No chip family or architecture...

CVEs, Damned CVEs, and...

Is your vulnerability scanner showing zero problems with your Linux systems? If so, it’s probably missing something important. Conversely, if it’s suddenly showing hundreds of vulnerabilities, that’s likely an overstatement...

The Zenbleed Vulnerability: How to...

The Zenbleed vulnerability exploits a flaw in the speculative execution mechanism of AMD Zen 2 CPUs. It affects the entire Zen 2 range, even extending to AMD’s EPYC data center...

Essential Strategies for Recovering from...

Ransomware is a serious threat, so be prepared! The average ransom demand is high, and paying doesn’t guarantee recovery. Backups are crucial for recovery, but testing and proper storage are...

Patches for CVE-2024-1086 for CloudLinux...

Update April 8th, 2024: Updated ETA for CloudLinux 6h and CloudLinux 7. Update April 10th, 2024: Live patch for CloudLinux 6h and CloudLinux 7 are now available. The KernelCare team...

Update for KernelCare Live Patches...

Update April 8th, 2024: Updated ETA for AlmaLinux 8. Update April 8th, 2024 – #2: Updated ETA for AlmaLinux 9. Update April 9th, 2024: Live patches for both AlmaLinux 8...