Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Over 400 Arch Linux packages compromised to push rootkit, infostealer

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens.

A report from the open-source intelligence community Independent Federated Intelligence Network (IFIN) notes that a new maintainer is spoofing a trusted publisher on the AUR platform to push infected packages.

The Arch Linux distribution is popular among power users and developers, using the AUR catalog to provide the latest versions for installed software, drivers, and the kernel.

Microsoft fixes Windows update failures linked to WUSA installer

Microsoft has fixed a known issue that caused Windows updates released since May 2025 to fail when installed via the Windows Update Standalone Installer (WUSA) from a network share.

WUSA is a built-in Windows command-line tool that helps admins install and uninstall Microsoft Standalone Update (.msu) files through the Windows Update Agent API to deploy or remove patches, updates, and hotfixes.

This known issue affects Windows 11 24H2/25H2 and Windows Server 2025 devices on enterprise networks, as WUSA isn’t a common method for installing updates on home devices. Microsoft also noted that the bug doesn’t occur with a single.msu file or when the files are stored locally.

/* */