Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

2026-10-05T13:23:59Z•1d64d501dce1d49f832aada879162641bfe53edc6efc760add0a0a5efc0c75eb
CVE-2026-61500CVE-2026-88779AI securityCitrix NetScalerClingSTUNFortra BoKSLinux malwareRejetto HFSSTUN protocol abuseShinyHuntersactive exploitationauthentication bypassbackdoorcybercrimehealthcare cybersecurityhealthcare data breachpersistenceproxyremote code executionself-propagationzero-day

What happened

SecurityWeek roundup covering a Linux backdoor that abuses STUN and exploits vulnerabilities for propagation, healthcare data breaches affecting roughly 250,000 people, active exploitation of Rejetto HFS CVE-2026-61500 and Citrix NetScaler CVE-2026-88779, critical Fortra BoKS flaws, cybercrime law enforcement activity, and broader healthcare and AI security developments.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
1d64d501dce1d49f832aada879162641bfe53edc6efc760add0a0a5efc0c75eb
Enrichment time
2026-10-05T13:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.