Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th)
2026-08-08T19:23:39Z•f98e26b56c062072c76fbcd997ebfb6ab8833e2bdc11f646b6ee981ea7c2bba6
AMOSAtomic-StealerAtuinLinuxSSHbotnetbrute-forcecacheablecredential-theftdiagnostic-toolskeyvmacOSnpmpersistenceshell-historysupply-chain-compromisethreat-intelligencevulnerability-scanningworm
What happened
SANS Internet Storm Center digest covering Linux shell command logging with Atuin, automated SSH compromise and persistence, the keyv/cacheable npm supply-chain worm, botnet vulnerability scanning of diagnostic tools, and Atomic macOS Stealer activity. The collection is threat-intelligence oriented and describes active attack techniques, malware, and supply-chain risk, but provides insufficient detail to map confidently to specific CVEs.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- f98e26b56c062072c76fbcd997ebfb6ab8833e2bdc11f646b6ee981ea7c2bba6
- Enrichment time
- 2026-08-08T19:23:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.