Server Security - Page 12 - Results from #220

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Exploring ReCAPTCHA Image Verification Challenges and User Adaptation

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Thanks to Phil Van Treuren for sending this one. I

LinuxSecurity.com Team
Sep 11, 2010

Mandriva And Canonical Wget Update: Security Advisory For Web Threat Fix

A number of Linux distributors have issued patches for fixing a widely used program that fetches Web pages, called Wget, so it can not be misused by attackers.

LinuxSecurity.com Team
Sep 07, 2010

Server Performance Comparison: Linux Shows Major Advantages

Rapid growth in the market for x86 servers over the past year brought good news for both Linux and Windows, as research firm IDC reported last week.

LinuxSecurity.com Team
Aug 31, 2010

Linux Kernel Security Update: Vulnerability Leading to Root Access Fixed

A critical vulnerability in the Linux kernel that gives attackers access to root via X server has been patched by Linus Torvalds. Meanwhile, kernel developer James Morris reports on the first-annual Linux Security Summit (LSS), which covered topics including usability, hardening the kernel, and API standardization.

LinuxSecurity.com Team
Aug 30, 2010

Afilias: Implementing DNSSEC for .info and Various Other Domains

Afilias, which operates .info and more than a dozen other Web site extensions, will announce on Monday plans to deploy an emerging standard known as DNSSEC that adds a layer of encryption to the Internet's Domain Name System. Will security worries propel DNS into the cloud?

LinuxSecurity.com Team
Aug 24, 2010

Mitigation and Prevention Strategies for Database Breaches

LinuxSecurity.com Team
Aug 11, 2010

Exploring Linux Security Benefits For Businesses Compared To Windows

"Security through obscurity" may be a catchy phrase, but it's not the only thing that's catching among Windows users. The expression is intended to suggest that proprietary software is more secure by virtue of its closed nature. If hackers can't see the code, then it's harder for them to create exploits for it--or so the thinking goes.

LinuxSecurity.com Team
Aug 09, 2010

BitDefender Study Highlights Importance Of Unique Credentials For Security

Tired of having to memorise several usernames and passwords for every secure website you visit? Don't fret. A recent study confirms what IT security experts have been saying all along--it is wiser to have different usernames and passwords to protect identities and information not meant to be public.

LinuxSecurity.com Team
Aug 09, 2010

Introducing Sagan: Advanced Syslog Monitoring and Real-Time Alerts

Softwink announces the release of Sagan, the ultimate in Syslog monitoring. Sagan can alert you when events are occurring in your syslogs that need your attention right away, in real time!

LinuxSecurity.com Team
Jul 26, 2010

Mozilla Bug Bounty Rise: $3,000 For Firefox Security Researchers

Mozilla is increasing the amount it pays security researchers for bugs from $500 up to $3,000. I personally think that's a very good thing. There has long been a debate about whether or not vendors should pay for security flaws. In my view, the flaws are going to be discovered whether or not a vendor is paying for them. The question is how they will be disclosed and whether or not those flaws will end up putting millions of users at risk - or not. By paying for flaws, what Mozilla is doing is providing an economic model for both security researchers and for itself. For security researchers, a $3,000 payment is not an unreasonable sum in my view and it's more than the $1,337 that Google pays. HP's TippingPoint also pays for security flaws as well though they seem to have a floating scale on payments as far as I can tell.

LinuxSecurity.com Team
Jul 19, 2010

Six Major Database Breaches Of 2010: Security Insights And Lessons

Whether it be insecure Web applications, poor password management, or a lack of database policies and monitoring, the average database today is at risk of exposure through a host of different threat vectors that many organizations are not even aware of -- let alone are addressing. Already in 2010, the number of database breaches as a result of such mistakes is mounting.

LinuxSecurity.com Team
Jul 05, 2010

Network Security Auditing Techniques and Software Tools

There's more to network security than just penetration testing. This chapter discusses software tools and techniques auditors can use to test network security controls. Security testing as a process is covered, but the focus is on gathering the evidence useful for an audit.

LinuxSecurity.com Team
Jun 29, 2010

Five Key Strategies for Enhancing the Security of Your Linux Systems

Protecting a networked computer is a never-ending challenge

LinuxSecurity.com Team
Jun 15, 2010

Introducing Disposable Virtual Machines in Open Source OS

A new open-source operating system will come with the option of creating one-time, disposable virtual machines on the fly as a way to protect against malicious files.

LinuxSecurity.com Team
Jun 10, 2010

Google's Move to Linux and Mac OS X Enhances Employee Security Measures

The Financial Times reported last night that Google was going to phase out internal use of Microsoft Windows due to security concerns. The migration away from Windows is reported to have started in January, motivated by the Chinese Aurora attacks on the company that exploited a flaw in Internet Explorer 6.

LinuxSecurity.com Team
Jun 06, 2010

MySQL 5.1.47 Critical: Urgent Advisory for Security Fix

William wrote in to let us know that the changelog to upcoming release to MySQL, version 5.1.47, has been released, and it appears this release fixes several critical vulnerabilities and probably should be applied as quickly as is reasonable.

LinuxSecurity.com Team
May 17, 2010

Using DAVTest to Effectively Test and Analyze WebDAV Servers

When facing off against a WebDAV enabled server, there are two things to find out quickly: can you upload files, and if so, can you execute code?

LinuxSecurity.com Team
Apr 30, 2010

Linux Systems Responsible For 5.14% Of Global Spam Contribution

I don't think this finding is unexpected at all. After all, Linux certainly operates better on the network, and sending spam email is no different than sending other types of email, or operating a web server. Whichever operation you're performing, choosing the best implementation for the job is a wise decision. Although Linux holds only a small market share, Linux computers appear to send a disproportionate amount of spam compared to other operating systems, according to new research from Symantec's MessageLabs messaging security division.

LinuxSecurity.com Team
Apr 27, 2010

Typo3: SA-2010-008 PHP Execution Vulnerability of Critical Importance

The developers of the Typo3 CMS framework have raised the alarm in an email to This email address is being protected from spambots. You need JavaScript enabled to view it., and security firm Secunia rates the problem "highly critical". In versions 4.3.0, 4.3.1 and 4.3.2 of Typo3 (as well as previous versions of the 4.4 development branch), attackers can inject PHP code from an external server and execute it within the Typo3 context. Advisory SA-2010-008 contains details about how to fix the problem. Upgrading to version 4.3.3 is one way of improving the situation. The vulnerability is also impossible to exploit if at least one of three PHP switches is set to "off": register_globals allow_url_include allow_url_fopen The chances are that one of them is already switched off by default, and switching off all three is a good idea. However, this may cause compatibility problems and, as a web hosting customer, you may also only have very limited access to your PHP settings.

LinuxSecurity.com Team
Apr 12, 2010

Meta Information Facilitating XSS Attacks in Web Services

According to security expert Tyler Reguly of nCircle, data fields for storing meta-information offer plenty of latitude for future cross-site scripting (XSS) attacks. JavaScript embedded in Whois and DNS records and in SSL certificates, for instance, can, under certain circumstances, be executed in a browser.

LinuxSecurity.com Team
Apr 08, 2010

Community Poll

More Polls

Server Security - Page 12

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security