Resources

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them.

The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF rootkit to hide itself. The AUR is Arch Linux’s community package collection, and it is separate

Related resources

13 December 2025

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity flaw impacting Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities (KEV) catalog, following reports of […]

15 November 2025

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution. The vulnerability in […]

7 August 2026

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux […]

Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details

Friday Squid Blogging: Squid-Inspired Fluid Pump

Resources

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Related resources

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us