{"id":60680,"date":"2026-05-18T16:20:00","date_gmt":"2026-05-18T16:20:00","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5241950"},"modified":"2026-05-18T16:20:00","modified_gmt":"2026-05-18T16:20:00","slug":"linux-kernel-flaw-opens-root-only-files-to-unprivileged-users","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/","title":{"rendered":"Linux kernel flaw opens root-only files to unprivileged users"},"content":{"rendered":"
<\/div>\n
\n

Security<\/p>\n

Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs<\/p>\n<\/p><\/div>\n

\n

Another Linux kernel flaw has handed local unprivileged users a way to peek at files they should never be able to read, including root-only secrets such as SSH keys. The bug affects multiple LTS kernel lines from 5.10 upward, although a fix has already landed \u2013 and there is now a proposal for reducing the odds of similar surprises in future. <\/p>\n

What FOSS analytics vendor Metabase memorably dubbed the strip-mining era of open source security<\/a> continues. This time, the culprit is CVE-2026-46333<\/a>, a local kernel vulnerability that lets an unprivileged user read files they should not be able to access, including those normally available only to root. An attacker who already has login access to an affected machine could therefore potentially grab SSH keys, password files, or other confidential credentials, as the KnightLi
\nblog explains<\/a>.<\/p>\n

Despite its official designation, a demo
\nexploit<\/a> on GitHub calls it ssh-keysign-pwn. It is not quite as catchy a name as Copy
\nFail<\/a>, or Dirty
\nFrag<\/a>, or indeed Fragnesia<\/a>,
\nbut we feel it is safe to say it hasn’t been a good month.<\/p>\n

According to a report
\non Linux Stans<\/a>, it affected LTS kernel versions 5.10, 5.15, 6.1, 6.6,
\n6.12, 6.18 and 7.0. The good news is that it’s already been fixed: Linus
\nhimself, in commit 31e62c2<\/a>, called the fix “ptrace: slightly saner ‘get_dumpable()’ logic.”<\/p>\n

The issue was reported
\non the oss-security list<\/a> on Friday by security consultancy Qualys,
\nas noted
\non X<\/a> by grsecurity’s Brad Spengler. In the same thread, Altan Baig
\npointed
\nout<\/a> that the underlying issue was reported
\nby Jann Horn<\/a> on the Linux Kernel Mailing List way back in 2020. The problem with tracking security reports, which Penguin
\nEmperor Torvalds described recently<\/a>, is not new, alas.<\/p>\n

ModuleJail<\/h3>\n

This also seems like a good time to look at what we thought was an
\ninteresting new defensive measure, Jasper Nuyens’ ModuleJail<\/a>. The top line of the README summarizes it:<\/p>\n

\n

A single POSIX shell script that shrinks a Linux host’s kernel-module attack surface by writing a modprobe.d blacklist for every kernel module not currently in use, minus a built-in baseline and an optional sysadmin whitelist. No daemons, no initramfs changes, no AI inside the tool. One script, one run, one blacklist file.<\/strong> <\/p>\n<\/div>\n

The mention of “no AI inside the tool” is arguably something of a
\ngiveaway, and you can see a CLAUDE.md file in the repo.<\/p>\n

Even so, how it works is simple enough. Although Linux has a monolithic kernel, it is modular. When the kernel’s source code is
\ncompiled, the person or tool building it can choose if each individual
\ncomponent is included (built into the binary), not included at all, or
\ncompiled as a module, which can be loaded on the fly as and when it’s
\nneeded. Since the kernel is mostly device drivers, it’s normal for
\ndistribution vendors to compile most non-essential components as kernel modules \u2013
\nas the Arch
\nwiki explains<\/a>. Blacklisting<\/a>
\na module just means adding its name to a list of modules not to
\nload.<\/p>\n

Blacklisting unused modules for added security isn’t a new idea. It’s
\nin the RHEL
\n6 documentation<\/a>, for instance, and a DoHost
\nblog post from last year<\/a> describes it as a security measure.<\/p>\n

\n
\n

MORE CONTEXT<\/h2>\n<\/p><\/div>\n<\/div>\n

ModuleJail simply automates the process. It blacklists any modules not currently in use. Probably safe for a server,
\nbut rather less ideal for a laptop or machine where you need to plug in
\nnew hardware on the fly. Connecting a USB headset, say, is quite different from plugging one into a headphone socket. While a device with a jack plug
\nuses your existing sound controller, by connecting a USB one, you’re
\neffectively adding a new sound controller \u2013 just one that happens to be
\nconnected over USB.<\/p>\n

ModuleJail mentions that its approach avoids changing the
\ninitramfs. An initramfs, like an initrd<\/a>, is a file containing a temporary RAM disk, so that a generic kernel can find and load the drivers it needs for the particular box it’s running on \u2013 even
\nbefore it can find the machine’s SSD and mount the root partition.<\/p>\n

Back in the 1990s, as grumpy old graybeards such as this vulture
\nrecall, recompiling your kernel was a standard part of periodic system
\nmaintenance. One benefit of building the kernel customized for your own
\ncomputer was eliminating the need for an initramfs. If all
\nthe drivers are built in, there’s no need for this temporary stage,
\nalthough as the ArchWiki notes, this does
\nlimit some advanced features<\/a>, which, for instance, systemd uses.<\/p>\n

We would love to see some of the systemd-free distros incorporate such automatic ModuleJail-style identification of essential
\nmodules, and use it to build a custom kernel on the fly, then banish
\nthe use of initramfs. (Maybe just keep the
\nall-options-enabled installation kernel around as an emergency
\nfallback.) Aside from a few special cases such as OpenZFS, this should
\nwork on most hardware \u2013 and make life simpler, quicker, and perhaps
\nslightly more secure. \u00ae<\/p>\n<\/p><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":60681,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-60680","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-security"],"yoast_head":"\nLinux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Linux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-18T16:20:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/1683625.jpg?imageId=1683625&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Linux kernel flaw opens root-only files to unprivileged users\",\"datePublished\":\"2026-05-18T16:20:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/\"},\"wordCount\":852,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/\",\"name\":\"Linux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg\",\"datePublished\":\"2026-05-18T16:20:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg\",\"width\":100,\"height\":66},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Linux kernel flaw opens root-only files to unprivileged users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Linux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/","og_locale":"en_US","og_type":"article","og_title":"Linux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-05-18T16:20:00+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/1683625.jpg?imageId=1683625&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Linux kernel flaw opens root-only files to unprivileged users","datePublished":"2026-05-18T16:20:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/"},"wordCount":852,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/05\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/","url":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/","name":"Linux kernel flaw opens root-only files to unprivileged users 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/05\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg","datePublished":"2026-05-18T16:20:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/05\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/05\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users.jpg","width":100,"height":66},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/linux-kernel-flaw-opens-root-only-files-to-unprivileged-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"Linux kernel flaw opens root-only files to unprivileged users"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/60680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=60680"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/60680\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/60681"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=60680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=60680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=60680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}