Researchers unveiled a PoC rootkit called Curing that exploits Linux's io_uring to bypass system call monitoring, creating a significant blind spot in Linux runtime security, as reported by ARMO.