LKM Rootkit Singularity vs eBPF security tools

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LKM Rootkit Singularity Exploits eBPF Security Tools A new LKM rootkit named Singularity has been identified, targeting systems that utilize eBPF security tools. The rootkit is capable of evading detection and exploiting vulnerabilities in the eBPF framework, affecting numerous systems relying on this technology. Security researchers are currently investigating the implications and potential countermeasures. 2 sources 39