Cloud Security
The 9 Best Docker Alternatives for Container Management
Learn about nine great Docker alternatives for containe...
Hive ransomware group extends to cloud-based Linux variants
Linux and FreeBSD variants of the Hive ransomware ...
KubeCon + CloudNativeCon Highlights Security for Open Source
Vulnerabilities in the life cycle of open-source softwa...
As Linux grows in popularity, cloud security threats are also growing
Linux is growing in popularity due to the impressive se...
Kubernetes hardening: Drilling down on the NSA/CISA guidance
NSA/CISA Kubernetes hardening guidance offers a solid f...
Are Your Containers Secure?
Container technology adoption has experienced a ra...
NSA, CISA release Kubernetes hardening guidance following Fancy Bear attacks
Hardening guidance from the NSA and CISA seeks to educa...
Predictions for open source and cloud over the months ahead
Both public cloud and Open Source adoption has grown ex...
Aqua Security: 50% of new Docker instances attacked within 56 minutes
Aqua Security's Cloud Native Threats report reveals tha...
Container Adoption not Slowed by Supply Chain Attacks
Widespread adoption of containerization ...
Cryptography
3 years, 17 alphas, 2 betas, and over 7,500 commits later, OpenSSL version 3 is here
The OpenSSL team has released version 3.0 of ...
Improve The CrowdSec Multi-Server Installation With HTTPS Between Agents
Learn how to improve the security of the CrowdSec multi...
The Linux Kernel Module Programming Guide: Crypto
To handle cryptography, the Linux kernel has its own AP...
Google Chrome for Linux is getting DNS-over-HTTPS, but there's a catch
Google Chrome for Linux is getting DNS-over-HTTPS, but ...
Serious Security: OpenSSL fixes two high-severity crypto bugs
OpenSSL has patched two high-severity crypto bugs. Upgr...
SSH Attack Vector: Dormant & Forgotten Keys
SSH keys play a critical role in server and network sec...
The What, Why & How of SSH Protocol
"Modern challenges require modern security approaches."...
The Case Against Full-Disk Encryption
Are you using full-disk encryption to protect your data...
Cartesi Launches 'Descartes' SDK Portal - Future of DApps
Cartesi has announced the launch of their Descartes SDK...
6 ways HTTP/3 benefits security (and 7 serious concerns)
HTTP/3 brings improved performance and reliability, as ...
Desktop Security
Best Linux desktops for beginners 2021
Tired of Windows? Sick of paying big money for Macs? Wa...
KDE Plasma 5.23.2 Released with NVIDIA GBM Support, More Bug Fixes
KDE Plasma 5.23.2 is now available as the second point ...
KDE Plasma 5.24 Desktop Environment to Introduce Support for Fingerprint Readers
The upcoming KDE Plasma 5.24 desktop environment - slat...
KDE Plasma 5.22.4 Further Improves Plasma Wayland, Makes System Monitor Faster to Launch
KDE Plasma 5.22.4 is packed with many improvements to m...
GNOME 40.3 Released with Improvements to GNOME Software, Many Bug Fixes
GNOME 40.3 has been released as the third maintenance u...
Linux Mint will no longer let you procrastinate on important updates
The latest release of Linux Mint includes cha...
Linux Mint 20.2 beta ISOs undergo testing and are due soon
Linux Mint 20.2 "Uma" beta ISOs are undergo testing and...
Cinnamon 5.0 Desktop Environment Released with Support for Updating Spices, More
Cinnamon 5.0 has been released with many improveme...
Linux Mint 20.2 'Uma' to get beta release by mid-June
Linux Mint 20.2 'Uma' is set for a beta release by mid-...
KDE Frameworks 5.82 Released with More Than 200 Changes
The KDE Project has released KDE Frameworks 5.82 as the...
Firewalls
BPF-Based Linux Firewall "bpfilter" Shows Impressive Performance Potential
Generating much excitement back in 2018 was bpfilt...
Call for Contributors with Knowledge of Linux Firewalls!
Greetings fellow Linux security enthusiasts,
Intereste...
IPFire Linux Firewall Distro Improves Its Intrusion Prevention System
Are you familiar with IPFire - the Linux firewall distr...
Soldering spy chips inside firewalls is now a cheap hack, shows researcher
The tiny ATtiny85 chip doesn’t look like the next big c...
Raluca Ada Popa: Her computer security method could make firewalls a thing of the past
Raluca Ada Popa found a fix for one of cybersecurity’s ...
DNS Firewalls Could Prevent Billions in Losses to Cybercrime
DNS protection could prevent approximately one-third of...
CUJO Smart Firewall vulnerabilities exposed home networks to critical attacks
Security researchers have uncovered a swathe of serious...
Government
Google: Here's how our $10bn investment will boost US cybersecurity
Google has outlined its efforts to shape the US governm...
Critical Update: Do You Know What’s In Your Software?
In the wake of several major cybersecurity incidents - ...
New Republican bill latest in long line to force encryption backdoors
Here we go again - Senate Republicans push a new bill t...
Ethical hackers swarm Pentagon websites
Hackers are crawling all over the US Department of Defe...
Lindsey Graham’s new bill would end the internet as we know it
If Sen. Lindsey Graham gets his way, the federal govern...
A new senate bill would create a US data protection agency
Europe’s data protection laws are some of the strictest...
South Korea's government explores move from Windows to Linux desktop
In what may prove to be the biggest migration from Wind...
How the Iowa caucus app went wrong and how open source could have helped
Opinion: It was incompetence, not politics, that led to...
Washington State Lawmakers Introduce Legislation Regulating Data Privacy, Facial Recognition
Following in the footsteps of their West Coast neighbor...
US military loves Linux
The US government is increasingly using open-source sof...
Hacks/Cracks
Hackers deploy Linux malware, web skimmer on eCommerce servers
Attackers are deploying a Linux backdoor on compromised...
These stealthy hackers avoid Windows but target Linux as they look to steal phone data
The stealthy LightBasin hacking group (also known ...
Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices
Multiple malicious packages have been identified on the...
FontOnLake malware infects Linux systems via trojanized utilities
The newly discovered FontOnLake malware family del...
RansomEXX ransomware Linux encryptor may damage victims' files
It has been discovered that the RansomExx ransomware ga...
New Go malware Capoae targets WordPress installs, Linux systems
The new Capoae Go malware, which targets WordPress inst...
Hackers develop Linux port of Cobalt Strike for new attacks
Hackers have developed a Linux port of the Co...
HolesWarm Malware Exploits Unpatched Windows, Linux Servers
The HolesWarm botnet cryptominer has already compr...
Linux version of BlackMatter ransomware targets VMware ESXi servers
The BlackMatter gang has joined the ranks of ransomware...
Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them
The Uptycs Threat Research team outlines how malicious ...
IoT Security
BusyBox flaws highlight need for consistent IoT updates
Security researchers have found and reported 14 vulnera...
Unsupported IoT Devices Are Cyber-Trouble Waiting To Happen
Imagine reading a headline in tomorrow’s news stating t...
Linux Foundation creates standards for voice technology with major partners
The Linux Foundation is teaming up with companies like ...
Putting an Ultra-Tiny Linux Board in a Phone Charger…Eventually
A project that aims to put an ultra-tiny Linux board in...
Network Security
The 8 Best Wireless Penetration Testing Tools for Linux
Protecting your wireless networks from infiltrators is ...
Should You Block Connections to Your Network From Foreign Countries?
This LinuxSecurity.com article featured on the frontpag...
What Is Penetration Testing and How Does It Improve Network Security?
The best way to improve and guarantee your network’s se...
IPFire Linux Firewall Distro Now Supports WPA3 to Make Wi-Fi Safe Again
The IPFire 2.25 Core Update 153 release brings WPA...
Windows Subsystem for Linux 2 bypasses the Windows 10 Firewall
The Windows Subsystem for Linux 2 will bypass the Windo...
WireGuard VPN is a step closer to mainstream adoption
Linux network stack maintainerDavid Millerhascommittedt...
The VPN is dying, long live zero trust
The traditional VPN is being replaced by a smarter, saf...
Research: 5G Networks Still Vulnerable to Location Tracking, Downgrading Attacks
A group of researchers have found 11 flaws in 5G protoc...
7 Ways VPNs Can Turn from Ally to Threat
VPNs are critical pieces of the security infrastructure...
What is Wireguard? Secure, simple VPN still in development
Are you familiar with Wireguard? The Wireguard VPN offe...
Organizations/Events
Linux Foundation adds software supply chain security to LFX
To address the growing threat of software supply c...
Google just tripled its bounty for Linux kernel bugs. Here's why
Linux is everywhere and it needs extra protection, acco...
SPDX becomes internationally recognized standard
In use for a decade as the de facto standard for commun...
Happy birthday, Linux: From a bedroom project to billions of devices in 30 years
In celebration of Linux's 30th birthday, Greg Kroah-Har...
Happy 30th Birthday, Linux!
Marius Nestor celebrates Linux’s 30th birthday with a g...
How Linux has changed the business landscape: It's more than you think
On the year of Linux's 30th anniversary, Linux security...
My life with Linux: A retrospective
In honor of Linux's 30th birthday, Linux security exper...
Hands On: DEF CON 29 Badge Embraces the New Normal
DEF CON 29 will be an event to remember, with this...
Black Hat USA 2021 Cybersecurity Conference Live Updates
The Black Hat USA 2021 conference, under way ...
Black Hat USA 2021 and DEF CON 29: What to expect from the security events
BlackHat USA 2021 is in full swing and DEF CON 29 is ra...
Privacy
Privacy-focused Linux Distributions to Secure Your Online Presence in 2021
Are you concerned by the rise in Linux malware? Worried...
13 Important Privacy and Security Settings in Ubuntu Linux
Learn 13 Linux security best practices you can follow t...
Ring Changed How Police Request Door Camera Footage: What it Means and Doesn’t Mean
Amazon Ring has announced that it will change...
Everything You Need to Know About Using Tor Browser on Linux
Want to protect your privacy online? Here's how to get ...
Amazon devices will soon automatically share your Internet with neighbors
Amazon's experiment wireless mesh networking has turned...
Most loved programming language Rust sparks privacy concerns
Rust developers have repeatedly raised concerned about ...
Cheap baby monitors and security cameras – widespread flaw allows remote viewing
New research highlights that cheap baby monitor and sec...
Microsoft Azure and Canonical Ubuntu Linux have a user privacy problem
Security advisor Luca Bongiorni spun up an Ubuntu ...
The Home Directory Will be Private in Ubuntu 21.04, What Does it Mean?
Until now, users on the same Ubuntu system could access...
Tor Browser 10.0.5
Protect your privacy and defend yourself against networ...
Security Projects
Linux Kernel 5.14 Reached End of Life, Users Urged to Upgrade to Linux 5.15 LTS
The time has come to say goodbye to another Linux ker...
Rust-proofing the internet with ISRG's Prossimo
The Internet Security Research Group (ISRG)'s ...
Microsoft just expanded its malware protection for Linux servers
Microsoft has announced it's adding even more security ...
Open Source Community Shifts Left With OpenSSF, Google SLSA
Security is becoming an increasingly key piece of ...
Oracle Releases GraalVM 21.3 With Java 17 Support, Other Enhancements
Oracle has published its latest quarterly update to Gra...
Linux Foundation raises $10M to support open-source security project
The Linux Foundation has raised $10 million i...
Google stakes new Secure Open Source rewards program for developers with $1M seed money
The Secure Open Source (SOS) Rewards pilot program, run...
"pkill_on_warn" Proposed For Killing Linux Processes That Cause A Kernel Warning
Security researcher and Linux kernel contributor Alexan...
Linux Kernel 5.13 Reaches End of Life, Users Urged to Upgrade to Linux Kernel 5.14
A friendly reminder for Linux kernel 5.13 users: the Li...
Linux boosts Microsoft NTFS support as Linus Torvalds complains about GitHub merges
Better support for Microsoft's NTFS file-system is comi...
Security Trends
Keep calm and learn Rust: We'll be seeing a lot more of the language in Linux very soon
To become a Linux developer, you used to need C as your...
Lennart: Linux Comes Up Short Around Disk Encryption, Authenticated Boot Security
Most Linux distros are currently coming up short from o...
How To Make Email Safe for Business
In this interview with Help Net Security, Dave Wreski, ...
Linux-based Malware Requires Linux Focused Cybersecurity Strategy
The rise in Linux malware highlights the importance of ...
IT Heads Wary Big Tech Will Taint Trust in Open Source: Report
Open Source is becoming increasingly popular among busi...
Vulnerability Detection and Patching: A Survey Of The Enterprise Environment
Detecting vulnerabilities and managing the associated p...
Live Patching Requires Reproducible Builds – and Containers Are the Answer
Live patching can improve security and minimize downtim...
Stale Open Source Code Rampant in Commercial Software: Report
A new report shows that stale open-source code is rampa...
The Role of Ethics in Cybersecurity Studies
University of Minnesota researchers' recent "experiment...
An Abridged Guide to the Enterprise Linux Landscape
From robust security to high levels of flexibility, Lin...
Security Vulnerabilities
Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeover
CloudLinux’s security platform for Linux-based websites...
Critical Linux Kernel Bug Allows Remote Takeover
A critical Linux kernel bug (CVE-2021-43267) exists i...
CISA warns of remote code execution vulnerability with Discourse
The CISA recently urged developers to update ...
LibreOffice, OpenOffice bug allows hackers to spoof signed docs
LibreOffice and OpenOffice have pushed updates to addre...
Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects
A high-severity code injection vulnerability has been d...
Apache HTTP Server Project patches exploited zero-day vulnerability
Developers behind the Apache HTTP Server Project are ur...
Latest Ubuntu Linux Kernel Security Updates Fix 12 Vulnerabilities, Patch Now
An Ubuntu Linux kernel security update fixes 12 se...
Apache OpenOffice can be hijacked by malicious documents, fix still in beta
Apache OpenOffice (AOO) is currently vulnerable to a re...
OMIGOD: Azure users running Linux VMs need to update now
Azure users running Linux VMs may not be aware the...
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
A critical security vulnerability (CVE-2021-40346) ...
Server Security
How to use this unique method of securing SSH
Learn about a unique and effective method of securing S...
The 10 Best Tools to Scan Your Linux Server for Malware and Security Flaws
Worried that your Linux server might be infected with m...
6 Must-Have Open-Source Tools to Secure Your Linux Server
Don't want to compromise on the security of your Linux ...
The Linux kernel may not be quite as secure as it should be
Kernel developers have gracefully accepted suggestions ...
UChecker tool scans Linux servers for outdated libraries
Security teams running Linux servers now have...
5 Best free to use Linux Server distributions for 2021
Learn about the selection of excellent - and free! - se...
Docker malware is now common, so devs need to take Docker security seriously
Three years after the first malware attacks targeting D...
SELinux changes for KVM-separated (Kata) containers
Learn about SELinux types that improve container securi...
New Kaiji malware targets IoT devices via SSH brute-force attacks
Another dangerous strain of malware targeting Linux ser...
Unix Test Lab Guide Project
Thanks to my buddy Duane Dunston, MS, Assistant Profe...
Vendors/Products
AWS commits to update its own Linux every other year
Amazon Web Services has announced that it will release ...
Alma and Rocky Linux release 8.5 builds, Rocky catches up with secure boot
CentOS 8.5 is available - but with only 6 weeks before ...
Microsoft gives Windows Subsystem for Linux a new icon, fixes issues and updates kernel
Microsoft has released the latest preview version of Wi...
CentOS Alternative Rocky Linux 8.5 Is Out Now with Secure Boot Support, Updated Components
Rocky Linux 8.5 is now out with Secure Boot support and...
Microsoft Edge finally arrives on Linux – “Official” build lands in repos
Microsoft Edge has finally arrived on Linux, with lots ...
SUSE heads for the Edge Computing with SUSE Linux Enterprise Micro 5.1
SUSE's latest SUSE Linux Enterprise Micro 5.1 release i...
LibreOffice 7.2.2 Community Released with 68 Bug Fixes, Update Now
LibreOffice 7.2.2 has been released as the second maint...
Say hello to Ubuntu Frame
Ubuntu Frame - a new Ubuntu Linux Internet of Things di...
Debian GNU/Linux 11.1 “Bullseye” Released with 24 Security Updates and 75 Bug Fixes
Debian GNU/Linux 11.1 has been released as the first po...
First Arch Linux ISO Powered by Linux Kernel 5.14 Is Now Available for Download
The first Arch Linux ISO image powered by the late...
