Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found -1 articles for you...
82
cyber defenserisk assessmentcybersecurity legislationAnalyzing Hacking Back Risks in Cybersecurity Legislation
Sometimes when tech policymakers try to solve a problem, their proposed cure would only make matters much worse. That’s certainly the case with draft US legislation that would give victims of cyberattacks the chance to hunt their suspected attackers down. . Known as the Active Cyber Defense Certainty Act, or ACDC for short, the bill aims to let victims try to track down attackers by entering the systems of organizations they suspect the hackers have used to mount assaults. Often, these organizations may be other companies that are unaware their computers have been compromised. An existing US law forbids this kind of pursuit, which is known as “hacking back.” Only a few government agencies, like the FBI, have the authority to hunt down suspected hackers in this way. Supporters of the bill, which was recently introduced in the US Congress, say the FBI and other government agencies are already overwhelmed by an onslaught of cyberattacks, including “ransomware” that has paralyzed computer systems in cities like Atlanta and Baltimore and massive data thefts at large companies like the Marriott hotel chain. In theory, giving businesses and individuals the right to do their own hunting would support the agencies' efforts. The link for this article located at MIT Technology Review is no longer available. . Examining the proposed Active Cyber Defense Certainty Act and its implications for cybersecurity and legislation.. Active Cyber Defense Certainty Act,Cybersecurity Risks,Hacking Back Implications. . Brittany Day
Jun 24, 2019
•
Government
83
Chinese militaryactive defensecyberespionageAnalysis of Mandiant Report on Chinese Cyberespionage Risks
Security vendor Mandiant's 60-page report on Chinese cyberespionage, which offers proof that it is coming from a Chinese military unit housed in a building in the Pudong district of Shanghai, adds new fuel to two hotly debated cybersecurity questions.. First, does this mean the quest for 100% certainty in "attribution" of intrusions has been achieved? And second, does that mean the U.S. is justified in taking what government officials like to call "active defense" measures -- what most others call "retaliation" or "offense"? The link for this article located at CSO Online is no longer available. . The recent analysis by FireEye associates the Chinese armed forces with cyber surveillance, raising concerns about the accuracy of attributions and the efficacy of countermeasures in place.. Chinese Military,Cyberespionage,Cybersecurity Analysis,Mandiant Report. . LinuxSecurity.com Team
Feb 20, 2013
•
Hacks/Cracks
74
corporate securityinformation warfareDDoS defenseSymbiot DDoS Tool Launch Raises Ethical and Legal Issues
Security company Symbiot is about to launch a product that can hit back at hackers and DDoS attacks by lashing out with its own arsenal of tricks, but experts say it may just be a bit too trigger-happy. Symbiot, a Texas-based security firm, is preparing to launch a corporate defence system at the end of March that can fight back against distributed denial-of-service (DDoS) and hacker attacks by launching a counter-strike. . . .. Security company Symbiot is about to launch a product that can hit back at hackers and DDoS attacks by lashing out with its own arsenal of tricks, but experts say it may just be a bit too trigger-happy Symbiot, a Texas-based security firm, is preparing to launch a corporate defence system at the end of March that can fight back against distributed denial-of-service (DDoS) and hacker attacks by launching a counter-strike. In advance of the product launch, Symbiot's president, Mike Erwin, and its chief scientist, Paco Nathan, have outlined a set of "rules of engagement for information warfare", which they say should be part of corporate security policy to help companies determine their exact response to an incoming attack. "Until today, security solutions have been totally passive in nature. Merely erecting defensive walls around the perimeter of an enterprise network is not an adequate deterrent," said Erwin, who argues that to have a complete defence in place, offensive tactics must be employed. The company said it bases its theory on the military doctrine of "necessity and proportionality", which means the response to an attack is proportionate to the attack's ferocity. According to the company, a response could range from "profiling and blacklisting upstream providers" or it could be escalated to launch a "distributed denial of service counter-strike". Security experts expressed alarm at the company's plans. Graham Titterington, principal analyst at Ovum, said "such a counterattack would not be regarded as self-defence and would therefore be an attack. It would be illegal in thosejurisdictions where an anti-hacking law is in place." He added that because many hacking and DDoS attacks are launched from hijacked computers, the system would be unlikely to find its real target: "Attacks are often launched from a site that has been hijacked, making it an unwitting and innocent -- although possibly slightly negligent -- party." Richard Starnes, director of incident response at Cable and Wireless Managed Security Services, said he would not employ an "active defence technique" because there are legal and ethical issues involved. Also, he would not be happy about any product "specifically designed to launch attacks" being put into commercial production. Starnes said it would be easy to hit the wrong target and even if it was the right target, there could be collateral damage: "You may be taking out grandma's computer in Birmingham that has got a 100-year-old cookie recipe that has not been backed up. The attack could also knock over a Point of Presence (PoP), so you are not only attacking the target, but also the feeds before them -- this means taking out ISPs, businesses and home users." Jay Heiser, chief analyst at IT risk management company TruSecure, said that he expects the product to have "emotional appeal" to companies that have been targets, but "that is a very bad criterion for choosing risk-reduction measures." The link for this article located at ZDNet is no longer available. . Security company Symbiot is about to launch a product that can hitback at hackers and DDoS attacks b. security, company, symbiot, about, launch, product, hackers, attacks. . Anthony Pell
Mar 11, 2004
•
Network Security
74
network securitysecurity strategiesthreat preventionInnovative Network Security Through Immune Response Simulation
Active Countermeasures models the human body's immune reaction to invasion by microbes. It runs a periodic vulnerability analysis based on the latest advisories from security monitoring organizations such as CERT, prioritizes the threats, scans the network for vulnerable machines, then automatically deploys a payload of prevention. . . .. Active Countermeasures models the human body's immune reaction to invasion by microbes. It runs a periodic vulnerability analysis based on the latest advisories from security monitoring organizations such as CERT, prioritizes the threats, scans the network for vulnerable machines, then automatically deploys a payload of prevention. "We'll use the same opening the hacker used to get [malignant] code onto the machine," said HP Labs' distinguished technologist Joe Pato. Through that opening, a sort of vaccination in the form of a payload of code to deal with the threat is delivered. The countermeasures in the payload are determined by policies pre-set by the organization, and could include everything from popping up an alert on the threatened machine to automatically quarantining it from the network. The link for this article located at Enterprise Linux IT is no longer available. . Adaptive Defenses mimic biological reactions to combat cyber risks. Uncover the mechanics behind this groundbreaking strategy.. Network Security Strategies, Threat Prevention Techniques, Vulnerability Management, Active Defense Systems. . Anthony Pell
Feb 25, 2004
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!