#LinuxServers

Cybersecurity News Everyday

@hendryadrian.bsky.social

3 days ago

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers Microsoft Defender Security Research Team found that threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers to enable remote code execution while remaining dormant during normal traffic. The technique leverages cookie-gated activation, obfuscation, and cron-based recreation to create a self-healing persistence mechanism...

Microsoft Defender reveals threat actors using HTTP cookies to control PHP web shells on Linux servers, enabling stealthy remote code execution via cron jobs and obfuscation for persistence. #LinuxServers #WebShells #Microsoft

TechRefreshing

@anupyadav.bsky.social

6 months ago

Rolling Release vs Fixed Release Linux Distros: Which Is Better?
techrefreshing.com/rolling-rele...
#Linux #RollingRelease #FixedRelease #RollingReleaseVsFixedReleaseLinuxDistros #Linux2025 #ArchLinux #Ubuntu #Manjaro #Debian #LinuxGaming #LinuxServers #Tech #OpenSource #LinuxDistros

TechRefreshing

@anupyadav.bsky.social

8 months ago

Top 5 RHEL-Based Linux Distros To Power Your Servers In 2025 Looking for the best Linux distros for your servers in 2025? Check out our in-depth guide to the top 5 RHEL-based distributions—AlmaLinux, Rocky Linux, Oracle Linux, CentOS Stream, and SUSE Liberty Li...

Top 5 RHEL-Based Linux Distros for Servers in 2025
techrefreshing.com/top-5-rhel-b...
#Linux #RHEL #ServerOS #AlmaLinux #RockyLinux #OracleLinux #CentOSStream #SUSELiberty #EnterpriseLinux #CloudComputing #SysAdmin #LinuxServers #Tech2025 #OpenSource

CySecurity News

@cysecuritynews.bsky.social

10 months ago

Linux Servers Under Attack: Hidden Malware Found in Fake Go Packages   Cybersecurity experts have discovered a new attack that targets Linux systems using fake programming tools. These harmful tools were shared on GitHub, a popular website where developers post and download code. Inside these fake packages was dangerous malware designed to completely erase everything on a computer's hard drive. How the Attack Works The attackers used a type of programming module written in Go (Golang), a language often used by developers for creating server software. They uploaded three of these modules to GitHub, pretending they were useful tools for developers. However, once someone downloaded one of these modules, it secretly contacted another server and downloaded a harmful script without the user's knowledge. This script, once running, carried out a destructive command that wipes out all the data on the system’s main storage device. It replaces the existing information with zeroes, which makes the system completely unusable and all files impossible to recover. The attack is aimed directly at Linux computers and servers, and it checks to make sure it is running on a Linux system before carrying out the harmful actions. What Was Affected The three fake Go modules uploaded to GitHub had names that made them look like real software. They were: • github[.]com/truthfulpharm/prototransform • github[.]com/blankloggia/go-mcp • github[.]com/steelpoor/tlsproxy Each of these was designed to look like a normal tool. One claimed to help with data formatting, another with secure communications. Because they seemed helpful, developers could have easily included them in their projects without realizing they were dangerous. Why This Is a Serious Threat This type of attack is especially harmful because it wipes the entire system. It doesn't just delete files — it destroys the operating system, settings, and everything else on the main disk. Once this happens, the machine cannot be restarted, and the data cannot be brought back. Also, since the Go programming environment allows many developers to use similar names for packages, attackers can upload fake versions that look almost like the real thing. This makes it harder for users to tell the difference. What Can Be Done Developers should be careful when downloading code or tools from the internet. They should only use software from trusted and verified sources. Before adding a new module to a project, it's important to research it and check whether it comes from a reliable developer. This attack is a reminder that even trusted platforms like GitHub can be misused, and that one wrong download can lead to total data loss. Staying alert and verifying software before use is the best way to stay safe.

Linux Servers Under Attack: Hidden Malware Found in Fake Go Packages #DataLoss #GitHub #LinuxServers

CrownCloud - Internet Services

@crowncloud.bsky.social

11 months ago

How To Install Laravel On CentOS Stream 10 Light

Launch Your Next Big Project: Install Laravel on CentOS Stream 10!

Checkout our #Knowledgebase
wiki.crowncloud.net/index.php?Ho...

#PHPDevelopment #CentOSStream10 #WebDevelopment #OpenSource #LinuxServers #PHPFramework #WebAppDevelopment #ServerSetup #LinuxTutorial #SysAdmin

CrownCloud - Internet Services

@crowncloud.bsky.social

11 months ago

How To Sync Time In CentOS Stream 10 Using Chrony Light

Keep Your Server Time Accurate with #Chrony on #CentOS Stream 10!

Refer to our Wiki:
wiki.crowncloud.net?How_to_Sync_...

#CentOSStream10 #TimeSync #LinuxTimeSync #ServerSetup #SysAdmin #LinuxAdmin #OpenSource #LinuxTutorialm#ChronyTimeSync #NetworkTimeProtocol #LinuxServers #TechGuide

ReconBee

@reconbee.bsky.social

11 months ago

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks BPFDoor was initially discovered in 2022 read more about New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks reconbee.com/new-bpfdoor-...

#BPFDoor #linuxserverattacks #linuxservers #cyberattack #CyberSecurity #CyberSecurityAwareness

Nostalgintosh | Professional Linux Enthusiast

@noelkoughcoto.bsky.social

1 year ago

#Linux #OpenSource #TechForBeginners #LinuxBasics #LearnLinux #LinuxCommunity #FreeSoftware #CommandLine #LinuxDistros #LinuxDesktop #LinuxServers #WhyLinux #LinuxTutorial #IntroToLinux #LinuxHelp #TechEducation #LinuxUsers #OpenSourceLife

Rene Robichaud

@neroqc.bsky.social

1 year ago

New Perfctl Malware Attacking Millions of Linux Servers A sophisticated and elusive malware known as "Perfctl," has been discovered targeting millions of Linux servers worldwide.

New Perfctl Malware Attacking Millions of Linux Servers
cybersecuritynews.com/perfctl-malw...
#Infosec #Security #Cybersecurity #CeptBiro #Perfctl #Malware #LinuxServers

Rene Robichaud

@neroqc.bsky.social

1 year ago

Linux Malware perfctl Attacking Millions of Linux Servers A Linux malware, dubbed "perfctl," actively targeting millions of Linux servers worldwide, exploits over 20,000 server misconfigurations

Linux Malware perfctl Attacking Millions of Linux Servers
gbhackers.com/linux-malwar...
#Infosec #Security #Cybersecurity #CeptBiro #Linux #Malware #Perfctl #LinuxServers