Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Ahead With Linux Security Features
identity management security tactics For years, we secured our Linux infrastructure by building walls: VPCs, security groups, and hardened SSH configurations. We treated the cloud like a virtual data center, assuming that if we kept the "bad guys" out of the network, our workloads were safe. . That model is no longer sufficient. Today, one of the most common paths from an initial compromise to a major cloud breach is the identity assigned to your Linux workload. When an attacker gains code execution on a Linux instance—through a...
Jul 17, 2026
security practices patch management Most of us don't hear about a kernel vulnerability until a CVE lands in our inbox or the vulnerability scanner starts complaining. By then, the patch isn't new anymore. Kernel developers may have been passing it around for review, arguing over the implementation, or revising it for days before anyone outside that community noticed it. None of those discussions are secret. They're sitting in mailing list archives, Git commits, and patch reviews where they've been the whole time. The strange...
Jul 14, 2026
Linux security cyber attacks Every Linux server in your fleet produces thousands of events every minute. From journald logs and auditd records to kernel-level eBPF hooks, your systems are constantly talking. Most of that noise is just the mundane churn of system services, CI/CD runners, or routine administrative automation. But among that noise, an attacker might be establishing a foothold, moving laterally, or setting up persistence. The challenge for any security team is: how do you separate the routine from the...
Jul 13, 2026
open-source infrastructure risk Security scanners flag exposed API keys in public repositories every day. The initial response is usually predictable: delete the commit, revoke the credential, and move on. That’s a mistake. . In a real Linux environment, an API key never stays in one place. By the time it hits a public repo, it’s already everywhere. It’s in the CI/CD pipeline. It’s in your container registry. It’s in the build logs. It’s in the backups. Git makes this worse because the history never dies. Deleting a file in...
Jul 11, 2026
open-source rootkit Most of us think of Linux rootkits as ancient history—the stuff of 90s hacking forums and clunky malware that would crash your system if you looked at it the wrong way. But if you think they’ve gone away, you’re mistaken. They’ve just gotten smarter. . Modern attackers aren't using the noisy tools of the past. Today’s threats are surgical. Many of today’s most advanced Linux rootkits operate at the kernel level or abuse legitimate system features to blend in with normal traffic. They’re...
Jul 09, 2026
Refine features
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security features
We found -2 articles for you...
102
open source communityLinux insightssecurity newsWelcome to the New LinuxSecurity.com: Your Essential Resource
As Linux and Security Evolves, So Has LinuxSecurity.com! . Welcome to the new and improved LinuxSecurity.com ! As an Open Source enthusiast and a member of the LinuxSecurity administrative team, I am very proud to announce that we have just completed the most extensive site overhaul we’ve ever done, coinciding with the 20th anniversary since Dave Wreski, our founder, first started the site. We’re super excited about the new site - these most recent site changes allows us all to interact with other community members who share the same passion for open-source development and cyber security, and who recognize that both of these things are interconnected. For the past year , I have been working with a team of talented administrators and developers worldwide to redesign LinuxSecurity.com, aiming to keep the best aspects of the website while making it available to a broader audience. We’ve made it easier to navigate, as well as easier to read, learn and contribute. A major part of this development has focused on creating a content structure and backend system that is user-friendly and easy to update. Here are some of the new features we’d love for you to explore: Feature stories, including a recent interview with security expert and author Ira Winkler Easier ability to contribute the news that matters to you, register on the site to receive periodic news updates , and participate in our forums . Linux Security advisories for all our favorite distributions, including Red Hat , openSUSE and Scientific Linux Subscribe to our open source security newsletters that cover the topics you need to keep your systems secure and keep you informed. Which Linux distro is most secure? Find out what other people are talking about in our community polls . Our Linux Security Forums page is a new feature on the site. Our experts are available to answer your Linux and open source security questions.We’re also hoping you’ll contribute and help out fellow Linux community members! Extensive documentation on how to secure your webserver , build a Linux firewall , how to use encryption , and other resources in our HOWTOs section. Have you read our most recent press release (hyperlink to press release once posted)? In this release, we elaborate on the launch of our new website and reflect on the 20 year journey that got us to where we are today. Since the site was founded in 1999, we’ve worked to develop LinuxSecurity.com into what we believe is one of the most well-respected and renowned resources for open-source security-related information, updates, news, and advisories. Every day myself and contributors from our community scour the Internet for the most interesting and important news, and share it with our visitors - IT professionals, developers and users like you, seeking to learn more about hacking, programming and Open Source. Dave Wreski, a Linux security expert and founder of LinuxSecurity, had a great vision regarding the future of Open Source. He envisioned the widespread use of Linux and other open-source tools in every project in every business at a time when Microsoft was calling Linux a “ cancer ”. He saw a world where Open Source would be respected and adopted because of its flexibility and superior open source security through open standards and full disclosure. Dave’s spoken with thousands of people, many of whom have remarked that his predictions for Open Source and Linux have been remarkably accurate. Not only has Linux taken off beyond all of our expectations, but Open Source in general has made remarkable strides and is now a part of our everyday lives. I have witnessed firsthand how forward-thinking companies like Guardian Digital, open source email security company and our primary sponsor, have been able to use the Open Source model to produce and release highly effective software, services and solutions. It neverceases to amaze me how Linux and Open Source enthusiasts have truly created a community like no other; a community in which projects rise and fall on their own merits, and competition between them only leads to the greater good of society. I am very proud to be a part of such a community! From the start of this Open Source revolution, LinuxSecurity.com has been a reliable platform for community members to learn, communicate and collaborate on a daily basis. Ultimately, we do this for the good of the community and we would love to hear your thoughts on the changes we have made. It gives us great pleasure to be such a significant part of this Open Source revolution. Like any open-source project, LinuxSecurity.com requires hours of work. If you feel you can contribute in any way, we would love to hear from you. Please do not hesitate to send us ideas, stories or articles at any time. Send us a message on Twitter or Facebook , post a comment in our forum , or share your story with us today!. Sincerely, Brittany
Jul 29, 2019
•
102
open sourceuser experiencesecurity resourceLinuxSecurity: New Site Launching February 4, 2019 with Enhanced Features
After many months of development by a dedicated team of programmers and beta testers, the new LinuxSecurity is almost ready! With an all new look & feel, organizational changes, security events, and additions to our staff, we hope to better serve the Linux and open source community. Although there are many aesthetic improvements, a major part of our development has focused on creating a content structure and backend system that is easy to update. . The open-source community is constantly growing and evolving, and security matters and concerns pertaining to Linux users are anything but stagnant. As passionate members of the Linux community and maintainers of LinuxSecurity.com, we feel it is extremely important that this central security resource for open-source community members stays up-to-date and continues to provide Linux users with relevant content and the best possible overall experience each time they visit. To ensure this, we have chosen to launch a new and improved version of LinuxSecurity.com. LinuxSecurity.com has been trusted by Linux users since 1999 to provide the latest open-source security-related news, distribution advisories, HOWTOs and other information pertaining to the community. The new LinuxSecurity.com will include an improved version of all of these features, along with other new features such as forums, polls and book reviews. With a more contemporary design, the new site will be much easier to navigate and will contain updated graphics which should improve visitors’ visual experience on the site. At the moment, we are in the process of migrating content from the current site to the new site. The new site is expected to launch on February 4, 2019. Mark your calendars and stay up-to-date by visiting our Facebook and Twitter pages frequently for more information and announcements regarding the launch. We are excited to share this amazing new resource with you! Sincerely, The LinuxSecurity.com Administrative Team Find us on social media: Twitter: @lnxsec Facebook: LinuxSecurity . The open-source community is constantly growing and evolving, and security matters and concerns pert. months, development, dedicated, programmers, testers, linuxs. . Brittany Day
Feb 11, 2019
•
102
user feedbackweb designsite redesignCommunity Input on LinuxSecurity Redesign Highlights Key Concerns
When the new version of LinuxSecurity.com was launched on December 1st, we also asked our readers to " Tell us what you think. " You have spoken, and we appreciate that! We received hundreds of comments & requests, and have been addressing a majority of them. We thought it was important to share some of the comments with you. While some were purely positive acknowledgements, others were thoughtful criticisms. We take every critique into account and address each as resources become available or when the criticism becomes the concern of many. . Because the number of responses, I have chosen to only a publish pseudo-random sample. I have divided them up into three categories which include formatting issues, Microsoft advertising, and other. Below each section, I respond to and address the concerns raised. As a regular reader of LinuxSecurity.com, you may also have concerns. Please submit them! LinuxSecurity.com belongs to the community, and we wish to serve it to the best of our ability. General Formatting Issues I got to see the preview of the new site and was impressed but today when it live, it looks horrible in firefox 1.0. FWIW, I did say I would accept cookies from https://linuxsecurity.com/ Keep up the good work. New site displays as a thin ribbon down the middle third of the screen using firefox Site is not better, at least not yet. Layout is terrible. Assumes a certain size screen and does not adjust for larger screen types. It is unusable as is hi there's a problem with the display of the main site in firefox 1.0. not sure if it is just me, but your CSS renders horribly in Firefox 1.0 on a Linux machine. Middle content column is only about 2 words wide. When in FireFox version, the website is displayed very small in width. Maybe bad table format. It's ok in Konqueror. You new top menu looks great, but when i put py screen on 800x640 the sub-menuitens cross the text "tell us what you think" ;). Again, check you table formatting. Other than that, ilike youre new layout, but its a lot of work to make it work flawlesly. After getting word of this problem, we were first unable to replicate it. Using several versions of Firefox, in Linux, Windows, and OS X, I was still unable to see any problem. A friend of mine also reported the problem and sent me a screenshot. Yes, it was confirmed. The site displayed as a thin column down the middle of the page. After reviewing the HTML, noticing several problems and making adjustments, it was fixed. I also verified with several others to make sure the changes resolved the entire problem. Microsoft Advertising Good looking site, except for one thing.. I think it's a **REAL SHAME** (tm) for a Linux security site that I get webpages which are filled with (only!) Microsoft's "Get The Facts" ads placed all over them. I really think these ads are showed to the wrong people. Don't you ?? Besides, they're not even true as all so called "independant researches" were not so dependant. To be realistic : just like the pro-Linux ads are, but they are not shown. Not here anyway. I would like to know why I connect to this site to look for information about linux security and I have to see Microsoft sponsored ads against linux.... I really have no need to be insulted by Microsoft ads for their "Get the lies" campaign. I guess you need to pay for the site somehow, but this will definitely discourage me from checking your site. It's a Linux related site, and this is a grave mistake. I think ads for online retailers would have been much more appropriate, especially given this time of year. I am shopping for gifts for my tech-savvy relatives, and ads for Tiger Direct, CompUSA, or Best Buy would have not only caught my eye, but would likely have led to a sale. other than the micro$oft banners, the site looks great. keep up the good work. Using firefox in linux your site is poorly formatted. Using my old install of mozilla I was able to see the correct format and the M$ ad at the bottom. Why ismicrosoft advertising on your site? I am new here and while surfing around on the site, i became scared when i saw an ad by micro$oft. after all, is this website a linux comunity devoted one or not? i can't realize *that* company sponsoring anything in this comunity without *side interests*. Although we had Microsoft ads running several months before the release of the new LinuxSecurity.com, the launch seemed to spark a lot of comments. While most of our readers understand that advertising is necessary to ensure that the site continues to operate, others took offense when they first saw the ad. It also prompted us to release an official statement with regard to advertising: Dear LinuxSecurity.com visitors: We have received many inquiries from community members regarding the subjects of the advertising campaigns featured on LinuxSecurity.com. Many have expressed confusion as to why we would allow Linux competitors to advertise on our site and the answer is simple: we believe in freedom of choice. To restrict certain companies from being able to advertise on our site would stifle competition and censor freedom - two concepts that fly in the face of everything the open source community stands for. It is the responsibility of those involved with free software and freedom to make sure that Linux remains the choice because it's better, not because we somehow believe we can ignore the competition. Thank you for continuing to support LinuxSecurity.com and the revolutionary open source product that is Linux. Sincerely, The LinuxSecurity.com Staff Other Comments good job changing the page design! congrats! The colours of the new site are much nicer than the old ones - quite easy on the eye. It also seems quicker to access the page, less time waiting for downloads. Nice job! great work guys, i really hope you keep it going! Looks like you're using Mambo, though in a very subtle way. It would be nice to share a ref. to mambo and where the template came from. Noone could mimic you unique look though! All the best !! Great Look Firstly let me say that the first time I visited your page was the day before yesterday. I found a link to the URL below on Google and went directly there. Well, yesterday I could still access the how-to at. Stupid me, I didn't print it and now the link doesn't work. I even went through the links selecting resources on the main page then firewalls and how-tos and so on, found what I was looking for but the link takes me back to the main page. Overall a nice redesign and very professional presentation of the various subjects. However, the fonts used in the left-hand selection frame are painfully tiny and the pages are very difficult to read with the gray-on-gray minimal contrast scheme. I love the new look. Excellent site! I didn't even know your site had newsletters. I'll definetly look into them now that I know. Perhaps you should occassionally do something to feature them? nice new look ;) Thanks for the feeds Love the look of the new site! Just wanted to drop a line and congratulate you guys! Keep up the good work. I'm pretty displeased that the links I've saved to great feature articles no longer work. Could not get to Howto's I have only heard about the site a coupleof hours ago, so I can´t do a deep evaluation, but it *certanly* looks promising and needed. Best of lucks. Keep up the great work. Much appreciated. Everyone, thank you for the kind comments. To clear up any confusion, yes we are using Mambo to archive the content. The site templates were created in-house. We are continuing to make adjustments to make the template better. There has been some concern about the size of the font on the left-side menus, but I think many do not realize that the same content is available through the top-horizontal menu. However, if more complaints come in, we will make adjustments. One comment above mentions that the Bandwidth Limiting HOWTO URL is broken. This problem has beenfixed. Another commented that their bookmarks to feature stories no longer work. This is unfortunately one of the tradeoffs we had to make when switching to a content management system. A full listing of features . You're bookmarks can be updated accordingly. We release two newsletters each week. Linux Advisory Watch contains a listing of the most recent vendor security advisories, and Linux Security Week outlines the most recent and relevant security news. Both newsletters are available in HTML and TXT format. . Another comment, our RDF feeds have been restored: static-content/linuxsecurity_advisories.xml static-content/linuxsecurity_articles.xml static-content/linuxsecurity_features.xml static-content/linuxsecurity_hybrid.xml Again, I wanted to extend the invitation for you to give us your comments . If you have already completed the form, or wish to respond to something that I've written here, you can reach me directly at
Dec 21, 2004
•
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!