Xubuntu confirms a malicious ZIP was served in October and is switching to the Hugo static site generator to prevent similar attacks.

The Xubuntu team has shared an incident report on its October website breach. Attackers brute-forced the site to inject malware - but was anything else affected?

You're reading Xubuntu Reveals How its Website Was Hijacked, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

A social media user claimed an Ubuntu PPA was being used to distribute ransomware. Their proof? Well, they didn't have any - but that didn't stop the panic.

You're reading Linux PPA Ransomware Scare is Light on Evidence, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

A Reddit user reports that Xubuntu.org may have been compromised, serving a ZIP file containing a Trojan instead of the real installer.