Great blog posts and updates on latest BPFDoor changes by HaxRob BPFDoor - Part 1 - The past: haxrob.net/bpfdoor-past-a… BPFDoor Part 2 - The Present: haxrob.net/bpfdoor-past-a…

Security researcher HaxRob released a two-part technical breakdown of BPFDoor, a Linux-targeting malware tied to past APT campaigns. The analysis includes insights on recent variants observed this year. haxrob.net/bpfdoor-past-a… haxrob.net/bpfdoor-past-a…

Forget compliance by severity color, how about compliance by emoji happiness level? #systemd, stay classy. 🙃

Really interesting ways here to hide files and other activity on Linux.

HaxRob Cool! Related (a paper we wrote recently): arxiv.org/abs/2506.07827

The first public PoC where a tmpfs filesystem mount is used with CLONE_NEWNS ?

Alex Vacca A technical deep dive: haxrob.net/onavo-facebook…