AquaSec uncovers Koske, a new cryptojacking malware potentially AI-generated, hiding in innocent-looking images to silently infect Linux servers and evade detection with rootkit stealth.

The Linux operating system, with its modular architecture, allows dynamic modules to be loaded into the kernel for flexibility. These…

A new issue of the hacker magazine Phrack contains a leaked archive detailing a sophisticated Linux rootkit with advanced stealth capabilities used by hackers.

A Linux rootkit is a kernel module that alters the behaviour of the kernel to hide activity and provide covert functionality. In this…

Critical Supermicro BMC flaws (CVE-2025-7937/6198) enable malicious, irreversible firmware to be installed, compromising servers at the root-of-trust level.

Introduction

The FlipSwitch rootkit uses bytecode modification to intercept syscalls in Linux kernel 6.9, bypassing the new switch-based dispatcher that rendered traditional sys_call_table hooking useless.

When digital trust becomes the most dangerous vulnerability of the twenty-first century

Trend Micro exposed ZeroDisco, a sophisticated op exploiting Cisco SNMP RCE (CVE-2025-20352) to install Linux rootkits on switches, setting a volatile universal "disco" password and erasing logs.

Linux Privilege