A chain of critical vulnerabilities affecting Linux desktop endpoints collectively known as “Nimbuspwn” has been identified and detailed in a blog post published by Microsoft’s 365 Defender Research Team. The flaws were identified while researchers were performing code analysis on root services, listening to System Bus messages in a Desktop-Bus (D-Bus) unit identified as “networkd-dispatcher.” Microsoft researchers stated multiple vulnerabilities were found, “including directory traversal, symlink race, and time-of-check-time-of-use race condition issues.” If exploited, these vulnerabilities could offer threat actors a multitude of attack options and payloads including rootkits, backdoors, and the opportunities to deploy malware stemming from the ability to perform arbitrary remote code execution (RCE). These flaws have been successfully patched by a network-dispatcher maintainer named Clayton Craft, and he recommends users update their Linux instances immediately. The quick identification, reporting, collaboration, and patching of these flaws (now identified as CVE-2022-29799 and CVE-2022-29800), indicate how important it is for organizations to work towards more cross-platform security. Endpoint detection tools and services are one of the best proactive/reactive solutions for organizations to identify and mitigate threats in real-time. Implementing effective endpoint detection and response (EDR) requires knowledge and experience in the field of cyber threat actors’ tactics, techniques, and procedures (TTP), and Ankura offers top of the line Managed Detection and Response (MDR) services provided by an expert-led team of analysts that offer 24/7 support to optimize our clients’ perimeter and network defense.