Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks
Mustang Panda uses an updated COOLCLIENT backdoor in 2025 to steal comprehensive data from infected endpoints, deployed alongside PlugX and LuminousMoth.
Linux Security Tools Bypassed by io_uring Rootkit Technique, ARMO Research Reveals
io_uring can enable full-featured rootkits to bypass traditional Linux runtime security tooling, allowing undetected command-and-control and I/O operations.