485: Destination Linux 485: Craig from Sandfly on Linux Malware Trends, OpenRGB Upgrades & Big Distro News

In Destination Linux Episode 485, Ryan, Jill, and Zeb are joined by Craig from Sandfly Security for a deep dive into the latest Linux security trends. Craig shares insights from the upcoming Cold Incident Response Conference, including modern Linux malware tactics, IoT rootkit risks, fake kernel threads, UPX‑packed binaries, and new Golang C2 frameworks targeting non‑x86 platforms.

Jill highlights major updates in OpenRGB, including expanded support for GPUs, keyboards, motherboards, and more. Zeb covers Peppermint OS shifting from X.Org to XLibre, Ubuntu 26.10 unexpectedly adopting the Linux 7.3 kernel, and MX Linux’s forum being hit with a massive DDoS attack. Plus community feedback, Sandfly Security, and closing thoughts from the DL crew.

00:00:00 Welcome to Destination Linux

00:03:19 Community Feedback

00:15:54 Sponsored by Sandfly Security

00:18:21 Cold Incident Response Conference

00:24:07 Linux Malware Trends

00:35:09 IoT Rootkit Risks

00:40:08 OpenRGB Adds Support for New Hardware

00:53:19 Peppermint OS Moving to XLibre

00:56:38 Ubuntu 26.10 to use Linux 7.3 Kernel

01:00:22 MX Linux Forums Suffer DDoS Attack