NewsBleepingComputer11.11.2026SME

eBPF Rootkits: Why Underground Actors Are Taking Notice

Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques are spreading through underground forums, where threat actors are sharing rootkit source code, tutorials, and exploits targeting Linux systems. [...]

Other advisories

Not ratedosv:CLEANSTART-2026-XI88125OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
HighCVE-2026-65960Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Te…
Not ratedosv:CLEANSTART-2026-RR69171vulnerability has been found in cilium ebpf up to 0
Not ratedosv:CLEANSTART-2026-LX44302OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
Not ratedosv:CLEANSTART-2026-OS96290OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
Not ratedosv:CLEANSTART-2026-KZ38920vulnerability has been found in cilium ebpf up to 0
Not ratedosv:CLEANSTART-2026-CI21288vulnerability has been found in cilium ebpf up to 0
Not ratedosv:CLEANSTART-2026-XW68310OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages

Other news entries

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitNewsThe Hacker News12.06.2026

Source: https://www.bleepingcomputer.com/news/security/ebpf-rootkits-why-underground-actors-are-taking-notice/

More on eBPF

Other advisories

Other news entries