Linux 'io_uring' security blindspot allows stealthy rootkit attacks

Published on April 24, 2025

A significant security gap in Linux runtime security caused by the 'io_uring' interface allows rootkits to operate undetected on systems while bypassing advanced Enterprise security software. [...]

Continue reading on website
Other news

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

April 24, 2025
The threat actors behind the Darcula phishing-as-a-service (PhaaS) platform have released new updates to their cybercrime suite with generative artificial intelligence (GenAI) capabilities."This addition lowers the technical barrier for creating phishing pages, enabling less tech-savvy criminals to deploy customized scams in minutes," Netcraft said in a new report shared with The Hacker News."

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

April 24, 2025
Cybersecurity researchers have demonstrated a proof-of-concept (PoC) rootkit dubbed Curing that leverages a Linux asynchronous I/O mechanism called io_uring to bypass traditional system call monitoring.This causes a "major blind spot in Linux runtime security tools," ARMO said."This mechanism allows a user application to perform various actions without using system calls," the company said in