Red Hot Cyber
Cybersecurity is about sharing.
Recognize the risk, combat it, share your experiences,
and encourage others to do better than you.
RHC Dark Lab : 25 June 2024 20:48
Recently, a security alert shaked the infosec environment: A malicious actor has announced the sale of Use After Free (UAF) 0-day vulnerability affecting the Linux Kernel on the well-known darknet forum BreachForum. The vulnerabilit permits high privileges code execution to low priviliged users, posing a serious threat to affected systems.
The vulnerability author specifies that the vulnerability affects the 6.6.15-amd64 version of the Linux Kernel. UAF occurs when the memory freed previously could be subsequently re-used allowing attackers to execute arbitrary code with High Privileges (Local Privilege Escalation), bypassing OS’s standard secuirty measures
In the post the exploit author state “selling 0day Use-after free in the Linux Kernel, you can use it to do a Privileged Code Execution ( LPE (Local Privilege Escalation), or execute code with root privileges ), ( Data Leakage )..etc”. The sell price of the vulnerability is fixed to 150.000 USD. The only payment method allowed is exclusively through Monero (XMR) or Bitcoin (BTC) cryptocurrency. The use of cryptocurrency is chosen to ensure transaction’s anonymity.
Iscriviti GRATIS alla RHC Conference 2025 (Venerdì 9 maggio 2025)
Il giorno Venerdì 9 maggio 2025 presso il teatro Italia di Roma (a due passi dalla stazione termini e dalla metro B di Piazza Bologna), si terrà
la RHC Conference 2025. Si tratta dell’appuntamento annuale gratuito, creato dalla community di RHC, per far accrescere l’interesse verso le tecnologie digitali, l’innovazione digitale e la consapevolezza del rischio informatico.
La giornata inizierà alle 9:30 (con accoglienza dalle 9:00) e sarà interamente dedicata alla RHC Conference, un evento di spicco nel campo della sicurezza informatica. Il programma prevede un panel con ospiti istituzionali che si terrà all’inizio della conferenza. Successivamente, numerosi interventi di esperti nazionali nel campo della sicurezza informatica si susseguiranno sul palco fino alle ore 19:00 circa, quando termineranno le sessioni. Prima del termine della conferenza, ci sarà la premiazione dei vincitori della Capture The Flag prevista per le ore 18:00.
Potete iscrivervi gratuitamente all'evento utilizzando questo link.
Per ulteriori informazioni, scrivi a [email protected] oppure su Whatsapp al 379 163 8765
Supporta RHC attraverso:
Ti piacciono gli articoli di Red Hot Cyber? Non aspettare oltre, iscriviti alla newsletter settimanale per non perdere nessun articolo.
The middle-man for the transaction is IntelBroker, a well known malicious actor, making payment easier for a potential buyer. Moreover the use of a trusted middle-man ensure trust and transparency for the involved parties although they still operate anonymously.
0-day marketplaces poses an important threat to cybersecurity on a global scale. System administrators and infosec professionals needs to be constantly aware and ready to apply security patch as soon as they become accessible to threat actors. The security community must collaborate to identify and mitigate such threats as quickly as possibile.
The uncover of this 0-day Linux Kernel vulnerability highlights once again the importance of computer security and the necessity to be aware from emerging dangers. The technology community must continue to invest in responsive security measures in order to safeguard systems and sensitive data from increasingly sophisticated attacks.
RHC Dark Lab