CentOS

Platform

Threat entity extracted from intelligence sources

Entities›Platforms›CentOS

Frequency

occurrences

First Seen

January 24, 2026

Last Seen

November 5, 2026

API

Overview

Recent Events

Profile

1 / 2

REC

Recon

No techniques detected

Resource Dev

No techniques detected

Initial Access

T1566 - PhishingT1190 - Exploit Public-Facing Application

Execution

T1059 - Command and Scripting InterpreterT1053 - Scheduled Task/JobT1203 - Exploitation for Client Execution

Persistence

T1505.003 - Web Shell

Priv Esc

T1068 - Exploitation for Privilege Escalation

Defense Evasion

No techniques detected

Cred Access

T1003 - OS Credential DumpingT1110 - Brute ForceT1555.003 - Credentials From Web Browsers

Discovery

No techniques detected

Lateral Mov

T1021 - Remote Services

Collection

No techniques detected

T1071 - Application Layer Protocol

Exfil

T1041 - Exfiltration Over C2 Channel

Impact

T1486 - Data Encrypted for Impact

15 techniques detected across 9 tactics

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (18)

Human Attacker Exploits Marimo RCE at Machine Speed

Sep 14·4 sources

Multiple Vulnerabilities in cPanel & WHM Posed Security Risks

May 10·0 sources

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

Apr 30·159 sources

PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches

Nov 2·939 sources

AI-Driven Exploit for Linux Kernel Zero-Day CVE-2026-53264 Uncovered

Jul 28·5 sources

Vulnerabilities in HPLIP Affecting Linux Distros

Oct 15·4 sources

Critical ImageMagick Vulnerability Exposes Millions to Remote Code Execution

Apr 1·3 sources

Emergence of VoidLink Rootkit Threatens Linux Systems with Advanced Evasion Techniques

Mar 26·2 sources

CentOS 9 Vulnerability Allows Privilege Escalation to Root

Feb 6·3 sources

Critical DoS Vulnerability in Python 3.9 for Fedora 42 and 43

Jan 24·2 sources

Fedora Python 3.9 Command Injection Vulnerabilities Addressed

Feb 28·16 sources

Red Hat Relocates Engineering Team from China to India Amid Layoffs

Apr 11·2 sources

Exploits for CVE-2016-4463 and CVE-2017-2636 Released

Sep 8·5 sources

Emergence of Joy and HSTP Exploits in Cybersecurity Tools

Sep 9·4 sources

CISA Alerts on React Native Command Injection Vulnerability Exploited in Attacks

Feb 6·2 sources

Microsoft Defender for Endpoint Now Supports Linux Desktops

Oct 15·4 sources

Fedora 43 and CentOS 8 Address MuPDF Vulnerabilities

Feb 23·2 sources

ConnectSecure Launches Unified Linux Security Patching for Major Distros

Feb 4·2 sources

1 / 4

Related Entities

APT37 Kimsuky Malware Zero-day Exploit Denial of Service Command Injection Botnet Brute Force DDoS Header Injection Man-in-the-Middle Phishing

CentOS

Overview

Recent Events

Profile

Malware

CVEs

Threat Actors

Tools

Attack Types

Regions

Relationships

Related Clusters (18)

Human Attacker Exploits Marimo RCE at Machine Speed

Multiple Vulnerabilities in cPanel & WHM Posed Security Risks

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches

AI-Driven Exploit for Linux Kernel Zero-Day CVE-2026-53264 Uncovered

Vulnerabilities in HPLIP Affecting Linux Distros

Critical ImageMagick Vulnerability Exposes Millions to Remote Code Execution

Emergence of VoidLink Rootkit Threatens Linux Systems with Advanced Evasion Techniques

CentOS 9 Vulnerability Allows Privilege Escalation to Root

Critical DoS Vulnerability in Python 3.9 for Fedora 42 and 43

Fedora Python 3.9 Command Injection Vulnerabilities Addressed

Red Hat Relocates Engineering Team from China to India Amid Layoffs

Exploits for CVE-2016-4463 and CVE-2017-2636 Released

Emergence of Joy and HSTP Exploits in Cybersecurity Tools

CISA Alerts on React Native Command Injection Vulnerability Exploited in Attacks

Microsoft Defender for Endpoint Now Supports Linux Desktops

Fedora 43 and CentOS 8 Address MuPDF Vulnerabilities

ConnectSecure Launches Unified Linux Security Patching for Major Distros

Related Articles (36)

XLab explains

Cloud Agent Container Arm

Namecheap offers it

Exploit for Improperly Controlled Sequential Memory Allocation in Php

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell exploit

Critical PHP RCE Vulnerabilities: Patch Now (CVE-2026-109618, CVE-2026-109619)

Exploit for CVE-2026

Microsoft Defender Endpoint Linux Desktops

Microsoft Defender for Endpoint Comes to Linux Desktops

Linux Distros Unpatched Vulnerability : CVE-2026-86847 | Tenable®

Tr Dprk Apts Ted Backdoor Curlrat Target South Korean Media Automotive Sectors

Redis Cryptomining Botnet 3562 Servers

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

joy exploit

cve-2017-2636

Oracle Linux 8 Java 1.8.0 Important Update ELSA-2026

07 When Ai Makes 0 Days Feel Like N Days

Dirty Frag: new local exploit elevates privileges in Linux

CVE-2026-29203

“Dirty Frag”: Linux flaws grant root access

OPSWAT's MetaDefender Endpoint™,

Red Hat RHELocates its Chinese engineering team to India

AI finds critical ImageMagick vulnerabilities in default configurations

VoidLink Rootkit Leverages eBPF and Kernel Modules to Stealthily Infiltrate Linux Systems

AI is useless, zero trust is dangerous: Contrary lessons from Zero Trust World 2026

Fedora 42 python3.9 Critical Command Injection Fix FEDORA-2026

Fedora 43 python3.9 Important Command Injection Issues 2026

CentOS 8 Poppler Security Update Addresses Vulnerability 2023

Chinese-Made Malware Kit Targets Chinese

New CentOS 9 Vulnerability Allows Attackers to Escalate Privileges to Root

CISA Warns of React Native Community Command Injection Vulnerability Exploited in Attacks

ConnectSecure Unveils Unified Linux Security Patching for Red Hat, Ubuntu, Debian and CentOS

ConnectSecure Unveils Unified Linux Security Patching for Red Hat, Ubuntu, Debian and CentOS

Fedora 43 python3.9 Critical DoS Fix CVE-2025-12084 2026

Fedora 42 python3.9 Important Update Denial of Service CVE-2025

Related Entities