Skip to content
Threat Feed
Subscribe

Vendor

Xfce

2 briefs RSS
medium advisory

Potential Privilege Escalation via SUID/SGID Proxy Execution on Linux

Attackers may exploit SUID/SGID binaries like pkexec, su, or sudo on Linux systems to execute commands with elevated privileges, by identifying instances where a process runs with root privileges (user ID 0 or group ID 0) while the real user or group ID is non-root, allowing a low-privilege foothold to gain full system control.

su +17 privilege-escalation linux-security defense-evasion persistence system-exploitation
1r 4t
low advisory

Potential Proxy Execution via Systemd-run on Linux

This brief details how attackers may leverage the `systemd-run` utility on Linux systems for defense evasion and execution by running commands as detached, transient services or scopes to obscure their activities and parent-child process chains.

Acronis Cyber Protect +46 defense-evasion execution linux
1r 3t