Claude document-skill flaw can run attacker code on Linux
AIR Security says an unverified library in a shared temp directory can load via LD_PRELOAD; Anthropic declined to fix it.
Stories per day · 30 days
3 RSS
2 stories, newest first · one card per story
Stories tagged #ld-preload
Red Heron Hackers Exploit Critical Gitea RCE to Steal Source Code and Deploy Linux Rootkit
PRC-linked Red Heron exploits critical Gitea RCE CVE-2026-60004 to steal source code and deploy JITTERLY implant with SIXZUT LD_PRELOAD rootkit; victims span five countries.