Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

Discussion in 'all things UNIX' started by guest, Aug 23, 2021.

  1. guest

    guest Guest

    Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems
    August 23, 2021
    https://thehackernews.com/2021/08/top-15-vulnerabilities-attackers.html
    Trend Micro: Linux Threat Report 2021 1H
     
  2. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,888
    Linux is a failure on the desktop but it powers Internet servers.

    Microsoft now has its own custom server distro.
     
  3. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,104
    Location:
    Canada
    How do you mean?
     
  4. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    2,260
    This article on The Hacker News and the Trend Micro report are questionable to say the least.

    The Trend Micro report writes:
    Then they present various vulnerabilities (with their CVEs) - but inspecting them confirms that they do not represent a specific "Linux" vulnerability but vulnerabilities of some software, namely webserver software like Apache or Nginx running not only but mainly on Linux systems. None of them affected the Linux kernel.

    I haven't looked at every vulnerability in that list in detail but at some of them - and in every case the mentioned vulnerability was fixed long ago and shortly after the vulnerability had been reported.

    Is that mentioned in that article or in the report? No, it isn't. On the contrary, they make the naive reader believe that these vulnerabilities still exist (as not being fixed) and vaguely swagger about "vulnerabilities in Linux systems". If they had written that all operating systems (including Linux) and software running on them can be affected by vulnerabilities which makes it absolutely necessary to always and timely apply updates - that would be okay.

    Instead they chose to spread FUD - in order to sell their "security solutions".
     
  5. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,104
    Location:
    Canada
    The "spreading FUD" agenda seems to be the main theme in many of these types of articles.
     
  6. Daveski17

    Daveski17 Registered Member

    Joined:
    Nov 11, 2008
    Posts:
    10,239
    Location:
    Lloegyr
    It's like I've said repeatedly; security companies are using FUD to promulgate a 'Windows mentality' in Unix users. M$ has done a lot in recent years to make the integrally insecure Windows more secure. Primarily by bundling an effective AV with Windows in recent years. This has hit the security companies hard. So macOS and Linux users are seen as a new source of revenue. But first you have to wave the FUD bogeyman about a bit.

    Oh yeah, Linux isn't a failure on my desktop lol.
     
  7. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    2,260
    Neither is it on mine :) But I think @NormanF was talking about the Linux market share on desktop computers.
     
  8. Daveski17

    Daveski17 Registered Member

    Joined:
    Nov 11, 2008
    Posts:
    10,239
    Location:
    Lloegyr
    Yeah, but the seven or eight people around the world who run Linux don't think of it as a failure. ;)
     
  9. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,888
    It hasn't penetrated the desktop market like Windows but every server in the world runs Linux.
     
  10. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,104
    Location:
    Canada
    I thought you meant that. Just seeking clarification :D MX-19.4 is so far pretty amazing running from my pen drive.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.