![]() |
Sign Up! | Tags | Domains | Statistics | Options | Advanced Search |
Tagged: research, open source, botnets, data theft, vulnerability research, exploit code, zero day attacks, metasploit, pen testing, patch watch, arbitrary code execution, kernel level exploits, complex attacks, locally running web servers
The U.S. Computer Emergency Readiness Team (CERT) has issued a warning for what it calls “active attacks” against Linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been [...] … Continue Reading »