社区情报
来自安全社区、研究机构和开源生态的情报。
-
Linux Security Monitoring Challenges and EDR Visibility Gaps
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the investigation even begins. By the time analysts start looking at the logs, the workload has shut down, and the container no longer exists.
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the investigation even begins. By the time analysts start looking at the logs, the workload has shut down, and the container no longer exists.An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the investigation even begins. By the time analysts start looking at the logs, the workload has shut down, and the container no longer exists.扩展字段
{ "categories": [ "features", "linux-container-visibility-blind-spots", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/root/features/linux-container-visibility-blind-spots", "guid_attributes": { "isPermaLink": "true" } } -
Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300
Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.
Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.扩展字段
{ "categories": [ "features", "fragnesia-linux-privilege-escalation", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/root/features/fragnesia-linux-privilege-escalation", "guid_attributes": { "isPermaLink": "true" } } -
RubyGems Attack Highlights Open Source Supply Chain Risks for Linux Teams
RubyGems temporarily suspended new account registrations this week after threat actors pushed hundreds of malicious packages into the Ruby package ecosystem. At first glance, that may sound like a Ruby-specific problem. It is not.
RubyGems temporarily suspended new account registrations this week after threat actors pushed hundreds of malicious packages into the Ruby package ecosystem. At first glance, that may sound like a Ruby-specific problem. It is not.RubyGems temporarily suspended new account registrations this week after threat actors pushed hundreds of malicious packages into the Ruby package ecosystem. At first glance, that may sound like a Ruby-specific problem. It is not.扩展字段
{ "categories": [ "features", "rubygems-attack-linux-supply-chain-risk", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/root/features/rubygems-attack-linux-supply-chain-risk", "guid_attributes": { "isPermaLink": "true" } } -
Why CI/CD Pipelines Became Targets in Software Supply Chain Attacks
For years, software security discussions centered on vulnerable code. A bug inside an application could expose a workstation, production server, or cloud workload, so most supply chain conversations focused on malicious packages, outdated dependencies, and exploitable libraries buried somewhere inside the stack. That is no longer the main problem.
For years, software security discussions centered on vulnerable code. A bug inside an application could expose a workstation, production server, or cloud workload, so most supply chain conversations focused on malicious packages, outdated dependencies, and exploitable libraries buried somewhere inside the stack. That is no longer the main problem.For years, software security discussions centered on vulnerable code. A bug inside an application could expose a workstation, production server, or cloud workload, so most supply chain conversations focused on malicious packages, outdated dependencies, and exploitable libraries buried somewhere inside the stack. That is no longer the main problem.扩展字段
{ "categories": [ "features", "supply-chain-attacks-ci-cd-security", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/root/features/supply-chain-attacks-ci-cd-security", "guid_attributes": { "isPermaLink": "true" } } -
Why Red Hats krb5 Update Matters for Linux and Windows Authentication
Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2026-40356. On paper, it looks like another Linux package advisory.
Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2026-40356. On paper, it looks like another Linux package advisory.Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2026-40356. On paper, it looks like another Linux package advisory.扩展字段
{ "categories": [ "features", "red-hat-krb5-security-update", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/root/features/red-hat-krb5-security-update", "guid_attributes": { "isPermaLink": "true" } } -
Mageia 9 perl-XML-LibXML High Buffer Overflow Vulnerability MGASA-2026-0137
MGASA-2026-0137 - Updated perl-XML-LibXML packages fix security vulnerability
MGASA-2026-0137 - Updated perl-XML-LibXML packages fix security vulnerabilityMGASA-2026-0137 - Updated perl-XML-LibXML packages fix security vulnerability扩展字段
{ "categories": [ "mageia", "mageia-2026-0137-perl-xml-libxml", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/advisories/mageia/mageia-2026-0137-perl-xml-libxml", "guid_attributes": { "isPermaLink": "true" } } -
Mageia 9 perl-Net-CIDR-Lite Severe IP ACL Bypass Vulnerability 2026-0136
MGASA-2026-0136 - Updated perl-Net-CIDR-Lite packages fix security vulnerabilities
MGASA-2026-0136 - Updated perl-Net-CIDR-Lite packages fix security vulnerabilitiesMGASA-2026-0136 - Updated perl-Net-CIDR-Lite packages fix security vulnerabilities扩展字段
{ "categories": [ "mageia", "mageia-2026-0136-perl-net-cidr-lite", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/advisories/mageia/mageia-2026-0136-perl-net-cidr-lite", "guid_attributes": { "isPermaLink": "true" } } -
Mageia 9 dnsmasq Moderate Denial of Service and Buffer Overflow Alert
MGASA-2026-0135 - Updated dnsmasq packages fix security vulnerabilities
MGASA-2026-0135 - Updated dnsmasq packages fix security vulnerabilitiesMGASA-2026-0135 - Updated dnsmasq packages fix security vulnerabilities扩展字段
{ "categories": [ "mageia", "mageia-2026-0135-dnsmasq", "Linux", "Linux Security", "Security" ], "guid": "https://linuxsecurity.com/advisories/mageia/mageia-2026-0135-dnsmasq", "guid_attributes": { "isPermaLink": "true" } }