The lifecycle of software inevitably draws to a close, leaving many organizations grappling with the challenges of upgrading legacy systems. For Linux users, particularly those reliant on CentOS 7 and CentOS Stream 8, the recent end-of-life (EOL) dates have presented a daunting dilemma. The end of support means no more security updates, patches, or official […] read more

In light of recent cybercrime events, details pertaining to the Cisco zero-day flaw that has now been patched have emerged. As per the details, the flaw, if exploited, could allow threat actors to seize control of appliances and aid in evading detection. In the article, we’ll dive deep into the Cisco zero-day flaw and determine […] read more

Recently, multiple high-severity vulnerabilities were discovered in Intel Microcode that could potentially lead to privilege escalation. Canonical, the organization behind Ubuntu, has acted swiftly by releasing security updates to address these vulnerabilities. This article explores the details of these vulnerabilities and offers essential guidance on safeguarding your Ubuntu systems.   Overview of Intel Microcode Vulnerabilities […] read more

As per recent reports, a Moscow hacker has been charged in the US on various accounts of cybercrime. Charges leveled against the hacker include allegedly stealing data, extorting victims, and laundering ransom payments since 2021. In this article, learn more about the threat actor his activities, and cover details about the charges. Deniss Zolotarjovs: The […] read more

A recent discovery has exposed critical vulnerabilities in the Dovecot mail server, potentially allowing attackers to exploit the IMAP implementation and disrupt service. These vulnerabilities, identified as CVE-2024-23184 and CVE-2024-23185, can lead to denial-of-service (DoS) attacks by overwhelming the server with excessive address headers or very large headers. Dovecot is a popular open-source IMAP and […] read more

Linux kernel updates often include performance improvements and hardware compatibility. Regular kernel updates are crucial for patching vulnerabilities and protecting your system from cyberattacks. Live patching eliminates the need to reboot the system, avoiding service interruptions. Freshen up with something new and improved – if it’s as simple as applying a software update…. well, why […] read more

As per recent reports, a new macOS malware, dubbed the Cthulhu stealer, has been discovered by cybersecurity researchers. The information stealer is designed to target macOS hosts and is capable of harvesting a wide range of information. In this article, we’ll dive into the details of the Cthulhu stealer and uncover protective measures implemented against […] read more

Recently, Canonical has released security updates to address multiple Vim vulnerabilities in Ubuntu 14.04 ESM. Ubuntu 14.04, codenamed “Trusty Tahr,” reached its end-of-life (EOL) on April 30, 2019. After this date, Canonical stopped providing official updates, including security patches, for this version. However, some users and organizations still rely on older versions like Ubuntu 14.04 […] read more

PALO ALTO, Calif. – September 3, 2024 – TuxCare, a global innovator in enterprise-grade cybersecurity for Linux, today announced it received a CMVP–validated certificate for the AlmaLinux 9.2 kernel and is now on the NIST Active list.    TuxCare’s  Extended Security Updates offering provides a complete set of FIPS-validated AlmaLinux packages required for regulated workloads, […] read more

In the cyberthreat landscape, Qilin ransomware attack has recently been observed stealing credentials in Chrome browsers. Reports claim that these credentials are being acquired using a small set of compromised end points. In this article, we’ll cover how the attack plays  out and the complexities involved with deploying defense mechanisms. Let’s begin! Qilin Ransomware Attack […] read more

Are you passionate about technology and eager to make a significant impact in the world of Linux security, cybersecurity, or open-source software? Look no further! TuxCare and its parent company, CloudLinux, are currently seeking exceptional individuals to join our talented global team.    Our team is responsible for creating and maintaining advanced and cutting-edge Linux […] read more

Several vulnerabilities in the Linux kernel have been identified, also affecting Amazon Web Services (AWS) systems. Canonical has released important security patches addressing these vulnerabilities. These flaws primarily involve race conditions and memory management errors, which can be exploited to cause system crashes or unauthorized actions. Here’s a detailed look at some of these vulnerabilities […] read more

  Server health monitoring allows you to identify potential problems before they become critical, preventing costly downtime and data loss. Monitoring resource usage (CPU, memory, disk, network) helps optimize server performance and ensures efficient utilization. Combining monitoring with proactive maintenance strategies like Live Patching ensures maximum uptime and security. The rise of online businesses has […] read more

Cybersecurity researchers have recently discovered an unprecedented dropper. Being dubbed the PEAKLIGHT dropper, it’s used to launch malware capable of infecting Windows systems. Reports claim that such infections lead to the prevalence of information stealers and loaders on Windows devices. In this article, we’ll cover what the dropper is and how it functions. Understanding The […] read more

Software development is a fast-paced world where progress is both a blessing and a curse. The latest versions promise new features, improved performance, and enhanced security, but they also come with significant challenges. For many organizations running their applications on end-of-life (EOL) Spring Framework 5.3 and Spring Boot 2.7, the prospect of upgrading to the […] read more

In jointly published analysis by Palantir Technologies and Trail of Bits pertaining to Google Pixel security, it has been revealed that Pixel phones shipped worldwide since 2017 host a dormant app. The app, if exploited, can become a staging ground for attacks and can be used for delivering various kinds of malware. In this article, […] read more

BusyBox, often referred to as the “Swiss Army knife of embedded Linux,” is a compact suite of Unix utilities combined into a single executable. It’s widely used in small and embedded systems due to its lightweight nature. However, like any software, it is not immune to vulnerabilities. Recently, Canonical has released security updates to address […] read more

In light of recent cybersecurity events, a critical SolarWinds Web Help Desk vulnerability has been revealed. Although SolarWinds patches pertaining to the vulnerability have been released, if it were to be exploited, it could lead to the execution of arbitrary code on certain instances. In this article, we’ll dive into the details of the vulnerability […] read more

Several security issues were discovered in QEMU, an open-source machine emulator and virtualizer. These issues also affected the Ubuntu 22.04 LTS release. In response, Canonical has released security updates to address QEMU vulnerabilities in Ubuntu 22.04 LTS. These vulnerabilities, if exploited, could allow an attacker to cause a denial of service (DoS) or leak sensitive […] read more

  Applications are typically tested and guaranteed to function on specific Linux distributions, but may work on others as well. Kernel versions, libraries, and system calls are key factors affecting binary compatibility between distributions. Differences in the operating system’s ABI (Application Binary Interface) are also a frequent source of compatibility problems. Binary compatibility is an […] read more

As a part of the Microsoft security update, the tech giant had released several fixes to address 90 critical security flaws. Reports claim that 10 of them have zero day vulnerabilities and 6 out of these 10 have fallen prey to threat actor attempts for exploitation. In this article, we’ll cover these fixes and the […] read more

A serious vulnerability has been discovered in the widely used wpa_supplicant package, potentially leaving millions of devices at risk. This flaw, tracked as CVE-2024-5290, poses a significant risk of privilege escalation, potentially allowing attackers to gain unauthorized root access to a system. wpa_supplicant is a critical component in the world of wireless security, providing client […] read more

The entire TuxCare team is pleased to congratulate vice president DeShea Witcher, as he was recently honored as a 2024 Marketing Executive of the Year as a silver Stevie winner in the 21st Annual International Business Awards®.   With more than 17 years of leadership experience, Witcher leads TuxCare’s fast-growing global marketing team. Over the last two years he […] read more

A new variant of the Gafgy botnet has recently been discovered by cybersecurity researchers. As per media reports, the botnet appears to be machines with weak SSH passwords for mining crypto. In this article, we’ll dive into the details of the Gafgyt botnet and learn more about the attacks. Let’s begin! The Gafgyt Botnet Uncovered […] read more

Debian 11, code-named “Bullseye”, has entered the Long-Term Support phase after three years of regular support from the Debian Security and Release teams. As of August 15, 2024, Debian 11 will be handled by the Debian LTS team, a separate group of volunteers and companies interested in making it a success.   Understanding Debian Release […] read more

We often find ourselves making educated guesses about the future. We speculate which technologies will soar, which platforms are worth our investment, and what the landscape of our tech stacks will look like a few years down the line. Sometimes, we’re even right.   Cloud Adoption: The Hype vs. Reality   For years, we’ve been […] read more

As per recent reports, various Russian and Belarusian organizations have been targets of spear-phishing campaigns. These organizations belong to the non-profit, media, and international government sectors. Threat actors who orchestrated these spear-phishing campaigns appear to have interests that align with the Russian government. In this article, we’ll dive into these Russian cyber attacks and uncover […] read more

EOL operating systems no longer receive critical security updates, leaving them highly vulnerable to evolving cybersecurity threats. End-of-life OSs often struggle to run modern software and hardware, resulting in compatibility issues, reduced performance, and lower productivity. Organizations using EOL systems face increased legal and financial risks due to non-compliance with regulations and the high costs […] read more

According to an updated advisory from the United States (US) Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation (FBI), the BlackSuit ransomware strain is known to have had demands totaling up to $500 million in payments. In this article, we’ll dive into the details of the ransomware attacks, determine who the key […] read more

A new and highly-effective cross-cache attack named SLUBStick has emerged, targeting the Linux kernel with a remarkable 99% success rate in transforming a limited heap vulnerability into an arbitrary memory read-and-write capability. This allows attackers to elevate privileges or even escape containerized environments, posing significant risks to Linux systems. It works by tricking the kernel […] read more

FIPS 140-3   In exciting news – TuxCare recently received a CMVP validated certificate for the AlmaLinux 9.2 kernel and is now on the NIST Active list (ahead of Red Hat & Oracle!), we are expecting our OpenSSL certificate soon too. The userspace modules (libgcrypt, nss, gnutls) are on the MIP list but may take […] read more

Cybersecurity researchers at Menlo Security have recently uncovered phishing attacks leveraging Google Drawings and shortened links generated through WhatsApp. The aim of such an attack methodology is to evade detection and trick users into accessing malicious links that acquire sensitive information. In this article, we’ll cover these Google Drawings phishing attacks in detail and determine […] read more

After nearly three months, Linux kernel 6.9 has officially reached the end of life on August 2nd, 2024. If you are currently running this EOL kernel version, it’s time to consider upgrading to the latest Linux kernel 6.10 or a long-term support (LTS) version to maintain system security and stability. Greg Kroah-Hartman, a renowned Linux […] read more

The Zenbleed vulnerability exploits a flaw in the speculative execution mechanism of AMD Zen 2 CPUs. It affects the entire Zen 2 range, even extending to AMD’s EPYC data center chips. As of July 2024, AMD has released several microcode updates to address the Zenbleed vulnerability. Some information found in this blog post has been […] read more

Cybersecurity researchers at Sonar have recently uncovered Roundcube flaws pertaining to Webmail software. Threat actors can exploit these Webmail software security flaws to execute malicious JavaScript code and steal emails and passwords. In this article, we dive into details of the potential exploits and uncover the vulnerabilities involved. Let’s begin! Roundcube Flaws: Initial Discovery And […] read more

PALO ALTO, Calif. – August 20, 2024 – TuxCare, a global innovator in enterprise-grade cybersecurity for Linux, today announced that KernelCare Enterprise is now a featured solution on the Ivanti Marketplace.    Removing headlines surrounding vulnerability patching for all popular enterprise Linux distributions, KernelCare Enterprise uniquely eliminates the need for downtime, reboots or maintenance windows […] read more