Pluggable Authentication Modules

Unmasked Origin: Infamous “OrBit” Linux Rootkit Exposed as a Fork of Open-Source Medusa OrBit Linux Rootkit Medusa Userland LD_PRELOAD Hooking

OrBit Linux Rootkit Medusa Userland LD_PRELOAD Hooking

Unmasked Origin: Infamous “OrBit” Linux Rootkit Exposed as a Fork of Open-Source Medusa

Do Son May 19, 2026

In July 2022, security researchers dropped the first analysis of OrBit, a sophisticated, then-undocumented Linux userland rootkit....

Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux Linux PAM, Privilege Escalation

Linux PAM, Privilege Escalation

Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux

Do Son June 19, 2025

A security vulnerability was found in Linux PAM (Pluggable Authentication Modules). Tracked as CVE-2025-6020, the flaw affects...