Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords
Unit 42 says CL-UNK-1211 used AI-assisted scripts to steal Linux sudo passwords from government targets.
8
Stories per day · 30 days
2 RSS
7 stories, newest first · one card per story
Stories tagged #sudo
USN-8895-1: Sudo vulnerability
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
Sudo Security Vulnerability Lets Attackers Escalate Privileges
A Sudo flaw, CVE-2026-96512, lets local users bypass time-based sudoers rules via a crafted TZ variable.
Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls
CVE-2026-96512 lets local users skew Sudo time-based authorization windows via the TZ variable.
5
CVE-2026-96512: sudo: TZ still affects NOTBEFORE/NOTAFTER
Sudo CVE-2026-96512 lets a local user shift sudoers time windows by abusing TZ.
USN-8803-1: Sudo vulnerability
Ubuntu warned Sudo can skip intercept checks, letting local users bypass policy and logging.
sudo and OpenDoas timestamp files (2020)
A 2020 write-up demonstrates reusing sudo timestamp files across SSH sessions for passwordless sudo, fixed via session-leader start times.
1