May 31, 2019

Unpatched Docker bug allows read-write access to host OS

Suse developer Aleksa Sarai has uncovered a bug in the way that the container framework handles path names.

Naked Security

May 16, 2019

Severe Linux kernel flaw found in RDS

Unpatched Linux systems are vulnerable to remote compromise from the local network.

Naked Security

February 28, 2019

Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals

Researchers have revealed how malicious Thunderbolt and PCI Express (PCIe) peripherals could be used to compromise computers running macOS, Windows, Linux and FreeBSD.

Naked Security

February 12, 2019

Linux container bug could eat your server from the inside – patch now!

Crooks could take over your network thanks to a critical bug in a popular Linux containerisation toolkit... here's what you need to know.

Naked Security

December 20, 2018

Most home routers lack simple Linux OS hardening security

A new assessment of 28 popular models for home users failed to find a single one with firmware that had fully enabled underlying security hardening features offered by Linux.

Naked Security

December 05, 2018

Kubernetes cloud computing bug could rain data for attackers

Kubernetes, a tool that powers much modern native cloud infrastructure, just got its first big security bug - and it’s a mammoth one.

Naked Security

November 26, 2018

Spectre mitigation guts Linux 4.20 performance

One of Intel’s fixes for the Spectre variant 2 chip flaw appears to have taken a big bite out of the performance of the latest Linux kernel.

Naked Security

October 24, 2018

Poorly secured SSH servers targeted by Chalubo botnet

SophosLabs has detected a new DDoS botnet targeting poorly secured SSH servers - called Chalubo, it is named in honour of its use of the ChaCha stream cipher.

Naked Security

October 22, 2018

Chalubo botnet wants to DDoS from your server or IoT device

Attackers using brute-force SSH attacks have started to distribute a new bot that engages in coordinated denial-of-service attacks

SophosLabs UncutThreat Research