Linux servers are under attack by sophisticated threat actors wielding AI-generated scripts and the SysGoRAT backdoor to secretly gather intel and maintain a persistent grip on targeted networks. These cyber attackers have set their sights on government and state-affiliated Linux infrastructure, using a potent mix of custom-built tools and open-source tricks to stay one step ahead.
Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)