Tar is a long-standing Unix/Linux archiving utility used to consolidate multiple files into a single tarball for storage or transfer.
Tar is a long-standing Unix/Linux archiving utility used to consolidate multiple files into a single tarball for storage or transfer. In cybersecurity, tar archives are commonly exploited to bundle payloads, stage exfiltration, or distribute multi-file toolchains, leveraging its ubiquity on Linux/Unix systems to blend in with legitimate activity. It also supports compression formats (gzip, bzip2, xz), which can aid in concealing data and payloads during transport.
A new malware named NarwhalRAT has been discovered targeting Korean users through phishing emails impersonating the Microsoft security team. The malware, linked to the North Korean hacking group APT37, can perform over…
Fedora has released updates addressing a critical permission modification vulnerability in StGit, identified as CVE-2026-33056. This vulnerability allows arbitrary directory permission modifications through crafted tar…
A path traversal vulnerability (CVE-2026-20685) in Apple's Private Cloud Compute (PCC) was discovered by security researcher Drinor Selmanaj, leading to a $150,000 bounty. The flaw allows attackers in a privileged…
A vulnerability in the tar utility was discovered, affecting multiple Ubuntu versions. The issue arises from incorrect handling of symlinks during archive extraction, potentially allowing attackers to overwrite…
Researchers Talal Haj Bakry and Tommy Mysk discovered a vulnerability in macOS that allows attackers to silently replace the main executable of trusted applications downloaded from the web without requiring elevated…