security: The global socket: how threat actors are weaponizing GSocket for stealthy C2
Microsoft Security Blog
2026-11-11
Microsoft reports that threat actors are using GSocket on compromised Linux servers to maintain encrypted remote access and command-and-control after the initial vulnerability has been patched. The post focuses on detection, investigation, and remediation guidance for this activity.