Rewterz Threat Alert – Covid-19 – Malicious URLs

Rewterz Threat Alert – MassLogger Malware Being Distributed Using Phishing Emails

June 12, 2020

Rewterz Threat Advisory – CVE-2020-10768 – Linux Kernel security bypass Vulnerability

Severity

Medium

Analysis Summary

Linux Kernel could allow a local authenticated attacker to bypass security restrictions, caused by an issue when Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. An attacker could exploit this vulnerability to perform a spectre v2 style attack.

Impact

Security Bypass

Affected Vendors

Linux

Affected Products

Linux Kernel

Remediation

Refer to Linux Kernel GIT Repository for patch, upgrade or suggested workaround information.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo