⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More
Weekly security recap covers Linux RAT, macOS stealer, WebSocket skimmers, and active exploitation of Ivanti and Palo
This weekly recap highlights multiple active threats including Quasar Linux RAT (QLNX), a modular Linux malware with P2P mesh networking and rootkit capabilities designed for supply chain and cloud breaches; PCPJack replacing TeamPCP for credential theft; active exploitation of CVE-2026-6973 in Ivanti EPMM and zero-day CVE-2026-0300 in Palo Alto Networks PAN-OS affecting thousands of exposed hosts. The recap emphasizes recurring patterns of supply chain poisoning, cloud misconfigurations, and exploitation of years-old vulnerabilities.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Ivanti?
Get an email when a new story names Ivanti, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- External attack surface management (EASM)
You find your forgotten internet-facing systems before attackers do.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-6973
- cve — CVE-2026-0300
- malware — Quasar Linux RAT (QLNX)
- malware — PCPJack