Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 5 articles for you...
212
system managementapplication protectionlinux kernelSeccomp Profiles: Improving Kubernetes Security and Protection Techniques
Seccomp , which comes from "secure computing mode," is a built-in security feature in the Linux kernel that limits the system calls a process can make. Seccomp profiles in Kubernetes help minimize attack surfaces and prevent malicious code execution. . Let's explore how Seccomp profiles can enhance Kubernetes security and how you can enable them in your Kubernetes environment. What Is Seccomp & How Does It Improve Kubernetes Security? Advancing security needs have fueled the evolution of Seccomp, a feature that has become increasingly relevant since its introduction in the Linux kernel version 2.6.12 in 2005. Today, it is used beyond just Linux and Kubernetes, including in web browsers like Chrome and Firefox. Seccomp modes include block or allow and the newer filter mode, which offers filtering and fine-tuning security policies. Seccomp profiles offer protection in two key ways: exploiting vulnerabilities or compromising the supply chain . Attackers who gain code execution within a Kubernetes workload can potentially compromise the host (or node), exposing secrets and elevating privileges. If malicious code attempts to use a system call not part of its allowed set, Seccomp profiles can effectively block it, denying attackers the ability to access the host filesystem. How Can I Enable Seccomp in Kubernetes? There are two ways to enable Seccomp profiles in Kubernetes: pre-made and custom profiles. The former is convenient but less tailored to specific needs, whereas the latter offers fine-grained security measures with more complexity to create and maintain. Linux admins, infosec professionals, internet security enthusiasts, and sysadmins looking to implement Seccomp profiles in Kubernetes need a profound understanding of the application's system call needs. Our Final Thoughts on the Security Benefits of Seccomp Using Seccomp profiles in Kubernetes environments is essential for enhancing overall security posture. For Linux admins, infosec professionals, internet securityenthusiasts, and sysadmins seeking to improve the security for Kubernetes environments, Seccomp profiles are a critical feature to consider. As the adoption of Kubernetes continues to increase, so does the need to secure Kubernetes environments and prevent malicious actors from compromising them. . Investigate the role of Seccomp profiles in bolstering Kubernetes security and discover best practices for their effective implementation in your setup.. Kubernetes Security, Seccomp Profiles, Container Security, System Call Management, Linux Security. . Brittany Day
Feb 22, 2024
•
Cloud Security
79
security strategyapplication protectionopen-source tools17 Best Open-Source Container Security Tools for Enhanced Protection
Container security is tricky, but using the right tools and utilities can make things much easier - and greatly improve security! Here are 17 great open-source container security tools to consider adding to your arsenal. . For container security, you'll find plenty of open-source tools that can help prevent a debacle such as the one that befell Tesla, which suffered a Kubernetes cluster breach . But container security is still tricky, so you need to know which utilities to add to your arsenal. If you've spent significant time choosing the best application security testing tool and ensuring your application is as secure as possible, you don't want it run on an insecure container. Fortunately, there are commercial container security products out there, but open-source projects can also take you pretty far. The link for this article located at TechBeacon is no longer available. . Delve into 17 open-source solutions for container security that boost your defenses and streamline your security approach.. Container Security Tools, Open-Source Utilities, Application Security, Security Best Practices. . LinuxSecurity.com Team
Apr 01, 2021
•
Security Projects
79
application protectionsecurity scanningopen-source toolsTop Open-Source Tools For Securing Container Environments
The use of containers is becoming increasingly popular, and container security is more critical than ever. Luckily, there are various tools that can help keep your business safe! This article covers some popular open-source tools that your DevOps team can use to secure your container environment. . As the use of containers is becoming more popular and streamlined, the security aspects related to containers have also become more critical for businesses. Containerization has particular structural and operational elements that need special attention. The architectural differences like a shared kernel for containers demand a different security approach altogether, in comparison to traditional security approaches. This makes it very important to understand and perform container-specific security scanning at the earlier stages of the build process. To meet these dynamic requirements of the DevOps teams , several open-source security tools are available in the market. This article covers some popular open-source security tools your DevOps teams can use to ensure the security of your container environment. The link for this article located at TechGenix is no longer available. . Delve into crucial open-source solutions that strengthen container security and safeguard your cloud-based applications efficiently.. Open Source Tools, Container Security, DevOps Practices, Application Protection. . LinuxSecurity.com Team
Mar 19, 2020
•
Security Projects
77
buffer overflowphp securityapplication protectionWays to Secure PHP5 Using Suhosin on CentOS 5.4 Server Environment
This tutorial shows how to harden PHP5 with Suhosin on a CentOS 5.4 server. From the Suhosin project page: "Suhosin is an advanced protection system for PHP installations that was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. Suhosin comes in two independent parts, that can be used separately or in combination.. The first part is a small patch against the PHP core, that implements a few low-level protections against bufferoverflows or format string vulnerabilities and the second part is a powerful PHP extension that implements all the other protections." This document comes without warranty of any kind! I want to say that this is not the only way of setting up such a system. There are many ways of achieving this goal but this is the way I take. I do not issue any guarantee that this will work for you! 1 Preliminary Note I have tested this on a CentOS 5.4 server with the IP address 192.168.0.100. I will install both Suhosin parts in this tutorial, the Suhosin patch (for which we need to recompile PHP5) and the Suhosin PHP extension. To see what Suhosin can do, please refer to The features of the Suhosin patch are listed under Engine Protection (only with patch); all the other features come with the Suhosin extension. The link for this article located at HowToForge is no longer available. . Enhance the security of PHP5 applications on CentOS 5.4 servers by implementing the Suhosin patch and extension for advanced protection against vulnerabilities. Suhosin, PHP Security, CentOS Hardening, PHP Extensions. . LinuxSecurity.com Team
Mar 15, 2010
•
Server Security
72
network securityapplication protectionlinux firewallAhorro Corporación Enhances Security with Linux and StoneGate Integration
As part of the 'shake up' in its security system, Ahorro Corporación decided to change the platform for its applications and choose to invest in Linux. This meant that the firewall would also have to run with Linux. The StoneGate firewall . . . . As part of the 'shake up' in its security system, Ahorro Corporación decided to change the platform for its applications and choose to invest in Linux. This meant that the firewall would also have to run with Linux. The StoneGate firewall and VPN came with its own hardened Linux operating system, which made it totally compatible with Ahorro's new platform while allowing the whole solution to run on any standard hardware. Having met this initial criteria, StoneGate was interesting to Ahorro for a number of other reasons including the high availability which was included as standard and that it offered flexible facilities to define policies The link for this article located at Dr. Dobbs is no longer available. . Ahorro Corporación upgraded its defenses using Linux, incorporating the StoneGate firewall for enhanced application protection.. Linux Firewall, StoneGate Security, Application Protection. . Anthony Pell
Oct 28, 2003
•
Firewalls
67
cryptographyapplication protectionP2P securityImproving Application Security: WAP and P2P Networks with Cryptography
In the previous installment of this series, we looked in particular at security for 802.11 networks. However, as we illustrated in that article, a secure network doesn't necessarily guarantee secure applications. In this article, we'll examine how to better lock down . . . . In the previous installment of this series, we looked in particular at security for 802.11 networks. However, as we illustrated in that article, a secure network doesn't necessarily guarantee secure applications. In this article, we'll examine how to better lock down wireless applications, with a focus on cryptography. We'll start by examining applications that run on WAP networks, and their particular security concerns. WAP gateways are commonly used to mediate between the general Internet and both wireless LANs (such as 802.11 networks) and wireless WANs (such as cell phone networks). We'll then take a quick look at the more free-form P2P networks and see what security problems are there. Finally, we'll present a code example that shows how your J2ME applications can encrypt data to improve security in any network. The Wireless Access Protocol (WAP) can be used with both WWAN services (CDPD, CDMA, GSM, etc.) and WLAN services (802.11). WAP is a specification for a set of communication protocols designed to allow and standardize ways for wireless devices to get information from networks and display it in their browsers. Using WAP, you can communicate with any operating system, including Palm OS, Symbian OS, Windows CE, and JavaOS. WAP helps to define servers, called gateways, that mediate between wired and wireless networks, and provide value-added services to wireless networks. However, these gateways and the initial releases of WAP proved to be a security liability, as you'll see. The link for this article located at IBM is no longer available. . Cryptography enhances security in WAP and P2P applications by protecting user data with strong encryption, ensuring confidentiality and reducing risks of tampering. Cryptography Security,Wireless Application Security, WAP Encryption, P2P Security, Application Protection. . LinuxSecurity.com Team
Aug 18, 2003
•
Cryptography
82
security advisoryNSAapplication protectionNSA's Spook Linux: Enhanced Security Against Application Risks
The ultra-secretive US spy agency, the National Security Agency (NSA), has released a prototype for an ultra-secure version of the Linux operating system. Developed in co-operation with industry research partners, the prototype includes enhancements to Linux which provide stronger protection against . . . . The ultra-secretive US spy agency, the National Security Agency (NSA), has released a prototype for an ultra-secure version of the Linux operating system. Developed in co-operation with industry research partners, the prototype includes enhancements to Linux which provide stronger protection against the bypassing of application security mechanisms and greater limits on the damage that can be caused by malicious or flawed applications. The technology draws heavily on Secure Computing's Type Enforcement framework which protects applications and network services, by segmenting them into domains. This type enforcement framework, together with role-based access control components, define security policy configuration files. The link for this article located at TheRegister is no longer available. . The ultra-secretive US spy agency, the National Security Agency (NSA), has released a prototype for . agency, ultra-secretive, national, security, (nsa), released, prototype. . Anthony Pell
Jan 08, 2001
•
Government
77
security issuessecurity flawsdefense strategiesKey Issues for Webserver Security and Effective Defense Strategies
Introduction If you examine the security problems reported with stolen credit card numbers or web server defacements in the last few months, it becomes obvious that many web applications have been slapped together with little care or planning for security. . . .. Introduction If you examine the security problems reported with stolen credit card numbers or web server defacements in the last few months, it becomes obvious that many web applications have been slapped together with little care or planning for security. What are the most common problems leading to insecure webservers and how does one avoid them? How can one as a customer or end user recognize if a server fullfills the most elemental security requirements? The link for this article located at Devshed.com is no longer available. . IntroductionIf you examine the security problems reported with stolen credit card numbers or web ser. introduction, examine, security, problems, reported, stolen, credit, numbers. . LinuxSecurity.com Team
Apr 20, 2000
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!