CybersecurityUpdated 12h ago

GSocket keeps hackers on patched Linux servers.

Fixing the vulnerabilities attackers used to get in doesn't necessarily end their access. BleepingComputer reports that multiple threat actors are using GSocket, a legitimate open-source remote-access tool, to maintain access to Linux servers even after those vulnerabilities are patched. The gap is between repairing the way in and removing the access attackers are already maintaining: GSocket isn't the flaw being fixed, but the tool being abused to stay on the servers.

1 publisher1 report

Coverage started 12h ago