--- title: "#apt articles | Hashnode" description: "Explore 79 articles tagged #apt on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/apt" --- Tag # #apt 79 posts · 4 followers [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [3d ago](https://hashnode.com/posts/cve-2026-41709-when-the-cvss-2-7-vulnerability-on-vmware-esxi-becomes-an-expensive-zero-day-for-apt/6af5213a88ec53c60be4ce09) ### [CVE-2026-41709: When the CVSS 2.7 vulnerability on VMware ESXi becomes an expensive Zero-Day for APT](https://blog.fiscybersec.com/cve-2026-41709-when-the-cvss-2-7-vulnerability-on-vmware-esxi-becomes-an-expensive-zero-day-for-apt?utm_source=hashnode&utm_medium=feed) Risk Summary What's more dangerous than an RCE CVSS 10.0 vulnerability being exploited loudly on the Internet? The answer from digital forensic experts is: A CVSS 2.7 vulnerability allows hackers to b 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/cve-2026-41709-when-the-cvss-2-7-vulnerability-on-vmware-esxi-becomes-an-expensive-zero-day-for-apt?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Oct 26](https://hashnode.com/posts/decoding-cve-2025-8088-how-apt-silent-lynx-turns-winrar-file-compression-feature-into-a-system-hijacking-backdoor/6adebbaf87a91600d878968b) ### [Decoding CVE-2025-8088: How APT Silent Lynx turns WinRAR file compression feature into a system hijacking backdoor](https://blog.fiscybersec.com/decoding-cve-2025-8088-how-apt-silent-lynx-turns-winrar-file-compression-feature-into-a-system-hijacking-backdoor?utm_source=hashnode&utm_medium=feed) Campaign Summary In October 2026, the security research team from Cisco Talos and Recorded Future Insikt Group published a detailed report on the cyber espionage campaign lasting from June 2025 to Aug 17 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/decoding-cve-2025-8088-how-apt-silent-lynx-turns-winrar-file-compression-feature-into-a-system-hijacking-backdoor?utm_source=hashnode&utm_medium=feed) [SAI PRANEETH BHATTU](https://hashnode.com/@saipraneethbhattu) · [Oct 23](https://hashnode.com/posts/package-managers-in-linux-rpm-yum-dpkg-and-apt-explained/6adbb62f49d34d8b5f22e539) ### [Package Managers in Linux: RPM, Yum, DPKG and APT Explained](https://saipraneethbhattu.hashnode.dev/package-managers-in-linux-rpm-yum-dpkg-and-apt-explained?utm_source=hashnode&utm_medium=feed) Sooner or later, every Linux user needs to install software. On Windows you download an installer and click through it. On Linux the story is different, and it is built around something called a package manager. In this lecture we will work out why package managers exist, what a package really is, and how the two big families of tools work. We will cover RPM and Yum on the Red Hat side, then DPKG and APT on the Debian side. We will finish by comparing apt and apt-get. 13 min read · [saipraneethbhattu.hashnode.dev](https://saipraneethbhattu.hashnode.dev/package-managers-in-linux-rpm-yum-dpkg-and-apt-explained?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Oct 20](https://hashnode.com/posts/nightspire-ransomware-warning-new-threat-targets-logistics-seaport-infrastructure-in-vietnam/6ad6e8c05554fd2ecf9c5bad) ### [NightSpire Ransomware Warning: New Threat Targets Logistics & Seaport Infrastructure in Vietnam](https://blog.fiscybersec.com/nightspire-ransomware-warning-new-threat-targets-logistics-seaport-infrastructure-in-vietnam?utm_source=hashnode&utm_medium=feed) Overview One morning in early October 2026, the entire warehouse and cargo flow operating system at a large seaport infrastructure center in Vietnam suddenly froze. The server screen displays the text 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/nightspire-ransomware-warning-new-threat-targets-logistics-seaport-infrastructure-in-vietnam?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Oct 19](https://hashnode.com/posts/beyondtrust-remote-support-cve-2026-102764-47-days/6ae4fd8de3677b4d721b20bb) ### [CVE-2026-102764: Suspected PRC-Nexus Actor Exploited BeyondTrust Zero-Day](https://404-founders.com/blog/beyondtrust-remote-support-cve-2026-102764-47-days?utm_source=hashnode&utm_medium=feed) The support tool that holds the keys to every endpoint just became the target. 9 min read · [404-founders.com](https://404-founders.com/blog/beyondtrust-remote-support-cve-2026-102764-47-days?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Oct 5](https://hashnode.com/posts/sparrowocky-silentmoonwalk-technique-when-backdoor-spoofs-call-stack-disables-edr/6ac30c58a2a60fc688c7353e) ### [SparroWocky & SilentMoonwalk Technique: When Backdoor Spoofs Call Stack Disables EDR](https://blog.fiscybersec.com/sparrowocky-silentmoonwalk-technique-when-backdoor-spoofs-call-stack-disables-edr?utm_source=hashnode&utm_medium=feed) Overview When cybersecurity researchers analyzed the memory of a compromised government server in Latin America, they found Lewis Carroll's nonsense poem Jabberwocky sitting quietly inside a sophistic 13 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/sparrowocky-silentmoonwalk-technique-when-backdoor-spoofs-call-stack-disables-edr?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Sep 28](https://hashnode.com/posts/operation-rapidrust-apt36-rustyshade-github-c2/6aba51a6209206b2a09f45b0) ### [Operation RapidRust: APT36 Hid Its C2 Inside GitHub](https://404-founders.com/blog/operation-rapidrust-apt36-rustyshade-github-c2?utm_source=hashnode&utm_medium=feed) Transparent Tribe used private GitHub repositories for C2 and a removable-media tool that relies on a victim opening a shortcut. 7 min read · [404-founders.com](https://404-founders.com/blog/operation-rapidrust-apt36-rustyshade-github-c2?utm_source=hashnode&utm_medium=feed) [Vikram Kumar Shukla](https://hashnode.com/@vikramkumarshukla) · [Sep 17](https://hashnode.com/posts/iran-linked-handala-hack-uk-us-netherlands-expose-chosen-brick-spyware-campaign/6aac17a9858461a1674329be) ### [Iran-Linked Handala Hack: UK, US, Netherlands Expose CHOSEN BRICK Spyware Campaign](https://vikramkumarshukla.hashnode.dev/iran-linked-handala-hack-uk-us-netherlands-expose-chosen-brick-spyware-campaign?utm_source=hashnode&utm_medium=feed) Joint advisory reveals Iranian MOIS operations targeting dissidents, journalists, and US companies — including Stryker attack and FBI Director email leak. 5 min read · [vikramkumarshukla.hashnode.dev](https://vikramkumarshukla.hashnode.dev/iran-linked-handala-hack-uk-us-netherlands-expose-chosen-brick-spyware-campaign?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 25](https://hashnode.com/posts/honeymyte-coolclient-kernel-rootkit-en/6a8d38b7d666a6491bd810eb) ### [HoneyMyte Takes CoolClient Into the Kernel: When a Rootkit Changes What Windows Lets You See](https://blog.fiscybersec.com/honeymyte-coolclient-kernel-rootkit-en?utm_source=hashnode&utm_medium=feed) Summary CoolClient was already a fully capable espionage backdoor: keylogging, clipboard theft, credential harvesting, file management, system reconnaissance, and a plugin-based extension architecture 22 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/honeymyte-coolclient-kernel-rootkit-en?utm_source=hashnode&utm_medium=feed) [Nguyễn Đăng Hưng](https://hashnode.com/@Wakaranai) · [Jul 22](https://hashnode.com/posts/beyond-the-archive-cve-2025-8088-stealer-targeting-ukraine/6a603c9e94ec59c56cf50c26) ### [Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine](https://bluecyber.hashnode.dev/beyond-the-archive-cve-2025-8088-stealer-targeting-ukraine?utm_source=hashnode&utm_medium=feed) 0\. Overview This report details a targeted cyber-espionage campaign conducted by the Russia-aligned threat actor group APT SHADOW-EARTH-066 (also tracked by CERT-UA as UAC-0226), delivering an updated 36 min read · [bluecyber.hashnode.dev](https://bluecyber.hashnode.dev/beyond-the-archive-cve-2025-8088-stealer-targeting-ukraine?utm_source=hashnode&utm_medium=feed)