Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 6 articles for you...
81
security researchprivacy riskattack techniqueTechniques by MIT Researchers Unmask Tor Anonymity Risks
MIT researchers have developed digital attacks which can unmask Tor services in the Deep Web with a high degree of accuracy.. As reported by Net Security, a team from the Massachusetts Institute of Technology (MIT) have developed attacks which can be used to identify an anonymous hidden service, clients and potentially servers. The link for this article located at ZDNet Security is no longer available. . A team from MIT has created methods capable of exposing Tor hidden services, jeopardizing the privacy of users on the Deep Web.. Tor Service Attacks, MIT Research, Deep Web Anonymity, Digital Security Risks. . LinuxSecurity.com Team
Jul 31, 2015
•
Privacy
83
access controlattack techniquesecurity researcherSamy Kamkar's OpenSesame: Quick Garage Door Access Method
It may be time to upgrade your garage door opener. Security researcher Samy Kamkar has developed a new technique that enables him to open almost any garage door that uses a fixed code. The attack Kamkar devised, known as OpenSesame, reduces the amount of time it takes to guess the fixed code for a garage door from several minutes down to less than 10 seconds. The link for this article located at ThreatPost is no longer available. . Explore how Kamkar's OpenSesame reduces the time required for guessing garage door codes to mere seconds, significantly boosting security measures.. Garage Door Attack, OpenSesame Technique, Samy Kamkar. . LinuxSecurity.com Team
Jun 08, 2015
•
Hacks/Cracks
83
incident responsecyber threatattack techniqueSANS Conference 2015: Six Dangerous New Attack Techniques
Experts with the SANS Institute convened at RSA Conference for their annual threats panel, this time dishing on the six most dangerous new attack techniques. Led by SANS Director John Pescatore, the panel featured Ed Skoudis, SANS faculty fellow and CEO of CounterHack Challenges, Johannes Ullrich, dean of research for SANS, and Michael Assante, SANS project lead for Industrial Control System (ICS) and Supervisory Control and Data Acquisition (SCADA) security. . Each offered up thoughts on how they've seen threats evolving and which techniques they expect to gain steam over the next year. According to Skoudis, more organizations will need to face the prospect of attackers not only getting savvy in how they steal information, but also in how they disseminate it, particularly if they're looking to publicly humiliate their targets. The link for this article located at Dark Reading is no longer available. . Each offered up thoughts on how they've seen threats evolving and which techniques they expect to ga. experts, institute, convened, conference, their, annual, threats, panel. . LinuxSecurity.com Team
Apr 23, 2015
•
Hacks/Cracks
83
cybersecurity trendhacktivismattack techniqueRedirecting Website Traffic: New Hacktivism Tactics With DNS Hijacking
Hacktivists have added a new tactic to their arsenal: redirecting all of the traffic from a target company's website.. According to a blog written by security expert Lars Harvey of IID, politically motivated attackers are now using DNS hijacks, which redirect all the traffic from a victim's legitimate website (and often all the email and back-end transactions, too) to a destination of the attacker's choosing. The link for this article located at Dark Reading is no longer available. . Hacktivism is transforming as activists use DNS hijacking to divert users from legitimate sites, critiquing corporate practices and social issues while exploiting vulnerabilities.. DNS Hijacking, Hacktivism Techniques, Attack Strategies. . LinuxSecurity.com Team
Jan 26, 2012
•
Hacks/Cracks
67
data protectionencryptiondata breachExploring Pervasive Memory Scraping Threats And Their Security Risks
What's "pervasive memory scraping" and why is it considered by SANS Institute security researchers to be among the most dangerous attack techniques likely to be used in coming the coming year?. Simply put, pervasive memory scraping is used by attackers who have gained administrative privileges to successfully get hold of personally identifiable information (PII) and other sensitive data held encrypted in a file system, according to Ed Skoudis, senior security consultant at InGuardians who is also an instructor at SANS events. Evidence of this attack is coming up again and again in data breach cases, he said. "Data is encrypted in a file system where it's stored," said Skoudis, who joined with Johannes Ullrich, chief research officer at SANS Technology Institute, to speak at the RSA Conference last week on dangerous attack techniques that appear to be on the rise. Though stored encrypted, the data has to be processed by some application and "if you're processing that data it will be processed in that system unencrypted," Skoudis pointed out. The link for this article located at Tech World is no longer available. . Simply put, pervasive memory scraping is used by attackers who have gained administrative privileges. what's, 'pervasive, memory, scraping', considered, institute, security, researchers. . LinuxSecurity.com Team
Feb 23, 2011
•
Cryptography
74
security riskinternet securityeavesdroppingBGP Exploit Demonstrates Stealthy Traffic Interception Vulnerability
Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency. The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination. Find out about a new exploit that uses a weakness in the design of the internet's Border Gateway Protocol (BGP) to re-direct traffic to an eavesdropper. How do you think ISPs will respond to defending against this new technique? Check it out in the article below. . The link for this article located at Wired is no longer available. . A serious vulnerability in the Border Gateway Protocol (BGP) poses risks of secret traffic interception, allowing attackers to hijack and manipulate data flow globally. BGP Exploit, Traffic Interception, Eavesdropping Risk, Internet Protocol, Network Security. . Brittany Day
Aug 27, 2008
•
Network Security
83
phpsecurity riskattack techniqueUnderstanding Security Risks of PHP's Weak Random Number Generators
PHP comes with two random number generators named rand() and mt_rand(). The first is just a wrapper around the libc rand() function and the second one is an implementation of the Mersenne Twister pseudo random number generator. Both of these algorithms are seeded by a single 32 bit dword when they are first used in a process or one of the seeding functions srand() or mt_srand() is called. This is a great article by Stefan Esser on attacking php PRNG. He explains the attack in such a way that it's easy to understand. . The link for this article located at suspekt is no longer available. . Analyzing PHP's inadequate random number generators reveals vulnerabilities and risks of exploitation.. PHP Random Numbers, mt_rand Attack, PRNG Security, PHP Security Risks. . LinuxSecurity.com Team
Aug 20, 2008
•
Hacks/Cracks
83
network securitycode executionattack techniqueJuniper Networks: New Attack Technique Compromises Embedded Devices
A Juniper Networks security researcher says he's discovered a new type attack that can compromise embedded devices such as routers and mobile phones. The vulnerability lies in the Arm and XScale microprocessors, two chips that are widely used in these devices. "There are interesting quirks in the ARM and XScale architectures that make things very easy for an attacker," said Juniper's Barnaby Jack. . The technique he has developed is "100 percent reliable, and it results in code execution on the device," he said. A successful attacker could run unauthorized software on a device connected to the network. In theory, criminals could use the attack to steal sensitive information from mobile phones or redirect Internet traffic on routers, say from a user's online bank account to a phishing site. The link for this article located at TECHWORLD is no longer available. . The technique he has developed is '100 percent reliable, and it results in code execution on the dev. juniper, networks, security, researcher, attack, compromise. . LinuxSecurity.com Team
Apr 06, 2007
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!