⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

The article is a weekly cybersecurity recap covering critical vulnerabilities and emerging malware threats discovered in May 2026.

• •Ivanti EPMM (CVE-2026-6973) and Palo Alto PAN-OS (CVE-2026-0300) flaws enable authenticated and unauthenticated remote code execution respectively, with 263,000 exposed hosts detected
• •Quasar Linux RAT employs peer-to-peer mesh networks combined with rootkit functionality and PAM backdoors for resilient, decentralized botnet infrastructure
• •DAEMON Tools supply chain attack deployed data miners and QUIC RAT implants to thousands of systems across 100+ countries using targeted shellcode payloads
• •Legitimate RMM tools (SimpleHelp, ScreenConnect) are weaponized for persistent access in multi-vector vishing campaigns targeting enterprise organizations
• •