.
Read the full article on GamingOnLinux.
Intelligence View
The work never ends to improve the KDE Plasma desktop environment for Linux, and with Plasma 6.6 a fun new feature is coming to tweak virtual desktops..Read the full article on GamingOnLinux.
.
Read the full article on GamingOnLinux.
title: Detect Exploitation - KDE Plasma 6.6 to get a great new feature - limit virtual desktops to the primary screen
id: 6eedd360-14ff-4208-8a3e-d9be4c48b8d2
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-26"
description = "YARA Signature for "
strings:
$str = "KDE Plasma 6.6 to get a great " ascii wide
condition:
any of them
}index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("KDE Plasma 66 to get a great new feature")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - countmessage: "*KDE Plasma 66 to get a great new feature*"CommonSecurityLog
| where Message has "KDE Plasma 66 to get a great new feature"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount descKognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich KDE Plasma 6.6 to get a great new featur.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.
Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.
Ähnliche Beiträge
Thematisch verwandte Begriffe: Plasma, great, feature, limit · 6 Treffer
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.