4 casos · pág. 1/1
Fortinet published PSIRT advisory FG-IR-26-186 for CVE-2026-109618, a flaw in PHP that can lead to remote code execution (RCE). PHP uses longjmp() to abort request handling on out-of-memory (OOM) errors. Some contexts do not account for this and leave request memory uninitialized before an allocation. Fortinet says it is still investigati…
FortiGuard Labs describes Evooo1Bot, a Linux botnet that embeds the Mirai DDoS engine in a more modular and capable framework. It uses encrypted C2 communications, layered string obfuscation (AES-256-CTR, ChaCha20, XOR-based key derivation) and a 28-command remote administration interface. It also ships an integrated exploit arsenal again…
FortiGuard Labs describes ClingSTUN, a Linux back-connect proxy backdoor that keeps persistent access and turns compromised devices into remotely controlled proxy nodes. It combines persistence, process termination, watchdog manipulation and remote command execution. It also uses legitimate public STUN servers for NAT traversal, to discov…
Unit 42 (unit42.paloaltonetworks.com) tracks a campaign, CL-UNK-1211, that compromised government entities and state-affiliated Linux infrastructure between October 2025 and April 2026. Unit 42 published the research on October 15, and gbhackers.com covered it on October 22. The operators carried out reconnaissance, persistence and intell…
