Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 594
Alerts This Week
Warning Icon 1 594

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 67 articles for you...
215

Defending the Open Source Desktop: Advanced Cybersecurity Strategies for Linux

There was a time when Linux meant server rooms and hobbyist forums. These days it's on regular laptops, and a big part of that is people getting fed up with commercial operating systems scraping their data, shipping telemetry nobody asked for, and boxing them into hardware ecosystems they can't opt out of. . None of that makes Linux immune to trouble though. Yes, it dodges most of the mainstream malware that everyone else deals with. But the software running on top, and honestly the person sitting at the keyboard, are still very exploitable. Actual security isn't a box you check once during setup. It's ongoing and includes hardening the system, keeping an eye on the network, patching the apps you rely on every day, all of it. The Browser Is Where Most Trouble Starts Most of a person's screen time occurs in a browser. It's the door between your machine and everything else, and it's also carrying your bank sessions, your login tokens, and your personal DMs. That combination makes it the obvious target. People use extensions for one-off tasks and then just leave them there. Forgotten, still running, still able to touch things in the background. It’s worth building the habit of going through what's installed every so often and figuring out how to remove browser extensions that aren't earning their keep anymore. Fewer extensions means less surface area, and it means a single compromised update can't plant something on your machine. A lean browser is faster too, sure, but the real payoff is that there's less room for something to sit there unnoticed, shipping your data out the back door. What's Actually Driving People to Switch? The move to open source isn't a trend. It's people wanting their machine back. There are plenty of pieces out there on quitting Windows and trying Linux , and they all circle the same complaint, which includes forced updates and data terms nobody agreed to. Once you're on Linux, you're the one deciding what runs and what phones home, so to speak. Thatcontrol is the whole foundation of everything else you do to lock the system down. It's not free though. No one's patching behind your back or babysitting your firewall. That's on you now and includes permissions, updates, all the calls that used to be automatic. Keeping Tabs on Your Own Network Securing one machine only gets you halfway. You need some visibility into what's moving across the network too, because that's usually where things actually go wrong. Attackers don't usually go after the hardened box first. They'll find whatever's weakest, some IoT gadget or an old phone nobody's updated in ages, and use that as a stepping stone toward something worth taking. That's the argument for internal visibility tools. Running something like Suricata east-west traffic monitoring means you can actually watch what's passing between devices you'd otherwise just assume are fine. Catch the traffic that looks wrong early, and you can quarantine the problem before it spreads to anything that matters. Locking Down Remote Access Opening SSH to the outside world raises the stakes quite a bit. That port gets hammered by bots around the clock, all of them just guessing passwords and hoping for better outcomes. A good password isn't nothing, but it's not enough on its own either. Get in the habit of pulling your logs, and once you know how to understand failed authentication patterns in Linux logs , you can tell a typo from a script chewing through a password list. From there you can set up rules that ban the bad actors automatically, before they get anywhere close to getting in. The Job Never Really Finishes Honestly, there's no final state here. Threats change, the tricks that work now won't work forever, and Linux being what it is only gets you so far without the habits behind it. Staying on top of your extensions, watching the network, actually reading the logs- that's what turns a fine setup into a hard one to crack. It takes effort, but what you get back is real ownership ofthe machine and a lot less to lose sleep over. That's really the whole point of open source anyway. Not just a different way of doing things, but one where you're actually the one in charge. . Explore advanced strategies for enhancing security on Linux desktops, including browser management, network visibility, and SSH hardening.. Linux security strategies, open source desktop, browser extension management, network visibility tools, SSH access security. . Anthony Pell

Calendar%202 Jul 13, 2026 User Avatar Anthony Pell Desktop Security
76

Linux Foundation: Transforming Chromium Development for Enhanced Security

As Linux security admins, staying ahead of the curve is paramount, especially regarding the browsers you use and manage. On January 9, 2025, The Linux Foundation is unveiling "Supporters of Chromium-Based Browsers," an initiative supported by tech titans including Google, Meta, Microsoft, and Opera. This project is expected to transform the open development ecosystem surrounding Chromium (the foundation behind popular browsers such as Google Chrome and Microsoft Edge) through an open governance model and industry collaboration that promises greater transparency, security, and customization for Chromium-based browsers while aligning perfectly with open-source community's security needs. . This is a golden opportunity for us Linux security admins to engage with a community-driven project prioritizing security and innovation. We’ll have more control over updates and browser features, minimizing unnecessary integrations and tightening security measures where it counts. The collaborative nature of the initiative ensures continuous scrutiny and improvement of security features, fostering an environment where potential vulnerabilities are swiftly addressed. With its open-source approach, you can trust that compliance and security standards are met with thorough community verification. Let's examine this initiative in more depth and explore how it will enhance your browser security strategies, keeping your systems safe and efficient. Strengthening Open Development One of the most exciting aspects of the "Supporters of Chromium-Based Browsers" initiative is its dedication to open development. By providing a neutral space where developers and the open-source community can come together, this initiative seeks to support existing Chromium projects and any that emerge - encouraging innovation while freeing various stakeholders from restrictions associated with proprietary solutions. We can expect a steady flow of features and updates developed collaboratively by the community to addressusers' needs and concerns. Open development also means increased transparency. Since the code and development processes are open, it's easier to understand the security measures being implemented. This transparency builds trust and allows for better-informed decision-making when configuring and deploying these browsers in your environment. Governance and Industry Support A key distinguishing feature of this initiative is its open governance model, with a technical advisory committee overseeing development to ensure it meets community needs rather than solely serving single entities' interests. This governance model seeks to promote balanced decision-making processes where voices from various sectors - security experts, developers, and end-users can all have their say and be considered in decision-making processes. Major tech companies such as Google, Meta, Microsoft, and Opera provide financial backing and invaluable expertise and resources. These companies are committing to funding and development, which means that the project will have the resources needed to tackle significant challenges, including those related to security. This industry support translates to a more robust and reliable browser that benefits from the combined experience and resources of some of the biggest names in tech. Impact on Chromium vs. Chrome Understanding the differences between Chromium and Google Chrome is vital to fully grasp the impact this initiative will have on users. Although Chromium serves as the basis of Chrome, certain features and integrations specific to Google services (like Chrome Sync) or licensed codecs for H.264 and AAC are missing from it. It also excludes DRM modules such as Google’s Widevine. Though these differences seem like limitations, they present an opportunity from a security perspective. By avoiding deep integration with Google services, Chromium has a smaller attack surface, reducing potential vectors for exploitation. This is particularly beneficial for environments whereminimalism and security are paramount. Linux security admins can configure Chromium-based browsers to fit their specific security needs without the additional bloat and potential vulnerabilities associated with proprietary features. Security Through Community Collaboration One of the most significant advantages of the "Supporters of Chromium-Based Browsers" initiative is the potential for enhanced security through community collaboration. With more developers and organizations contributing to the project, there will be increased scrutiny of the code . This collaborative effort ensures that security vulnerabilities are identified and resolved quickly, benefiting from the diverse expertise within the community. Moreover, the transparent development process means that security measures are visibly, openly debated and implemented. This transparency lets administrators understand the security considerations behind each feature or update, making it easier to trust the browser’s security posture. This level of openness is invaluable in an era where trust is a critical security component. Control Over Updates and Features One of the primary challenges with proprietary browsers is the reliance on the vendor for updates and features. With Chromium, you have more control over these aspects, which is crucial for maintaining a secure environment. The initiative's open development model means that updates can be reviewed and customized to meet specific security requirements before deployment. For us Linux admins, this control is a significant advantage. It means we can apply updates that align with our organization's security policies and timelines rather than being at the mercy of a vendor's update cycle. We can also disable or enable features based on our security needs, ensuring the browser is as secure as possible for our specific environment. Enhanced Compliance and Auditing Compliance with security standards and the ability to conduct thorough audits are critical for any organization. Theopen-source nature of the "Supporters of Chromium-Based Browsers" initiative means that compliance and auditing processes can be more robust and community-verified. With the code openly available, verifying that the browser meets specific security standards and conducting comprehensive audits is easier. This means added assurance that your browsers comply with industry standards and that you can prove this compliance through thorough, transparent audits. The community-driven nature of the project ensures that compliance is not just about meeting the minimum standards but continuously evolving to address new security threats and challenges. Community and Industry Backing Major industry players' support of this initiative cannot be understated. Google, Meta, Microsoft, and Opera are providing financial backing and bringing their extensive expertise. This level of support ensures that the project will have the resources it needs to tackle significant security challenges and push the envelope regarding innovation. This backing means that the initiative is not a fringe project but a well-supported, mainstream effort with a higher probability of long-term success. These major players' combined resources and expertise ensure the project will benefit from the latest security research and development advancements. This is crucial for staying ahead of emerging threats and ensuring that the browsers you deploy are at the cutting edge of security technology. Our Final Thoughts on This Promising Chromium Browser Development Initiative The "Supporters of Chromium-Based Browsers" initiative by the Linux Foundation marks an exciting development for open-source communities and Linux security admins. By prioritizing open development, transparency, and community collaboration, this initiative promises browsers that are feature-rich but also secure and customizable. We have an incredible opportunity with this initiative to engage in an endeavor that brings together Open Source and security principles. Byplaying an active role, we can help shape the future of Chromium-based browsers so they meet the highest security standards tailored specifically for our environment. Seize this chance to enhance your browser security strategies and keep your systems safe in 2025 and beyond! . Participate in a collaborative effort aimed at bolstering web safety for Linux system operators while simplifying enhancements and upgrades.. Chromium browsers, open development, security collaboration, Linux admins, community driven. . Brittany Day

Calendar%202 Jan 13, 2025 User Avatar Brittany Day Organizations/Events
210

Chrome 131: Urgent Advisory from CERT-In on Remote Exploit Risk

India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.6778.204 for Linux that could allow remote hackers to gain unauthorized access to impacted systems. As a Linux security admin, staying ahead of any threats that might compromise your systems is paramount. . These Chrome vulnerabilities present serious security threats, including remote code execution and potential data breaches that could allow unauthorized access and disruption. In this article, we'll examine critical details from this Chrome advisory, necessary mitigation steps, and the critical importance of staying updated for maximum protection. What Vulnerabilities Have Been Found in Google Chrome? A significant security vulnerability, CVE-2025-0291 , has been identified in Google Chrome, impacting users on multiple platforms, including Linux. This vulnerability arises from a type confusion issue within the V8 JavaScript engine, which could potentially allow malicious actors to execute arbitrary code on a victim’s system. Essentially, type confusion happens when the browser mistakenly accesses a resource using an incompatible type, leading to unexpected behaviors or even code execution. Mitre, a recognized authority in cybersecurity, explains that these types of vulnerabilities occur when there’s a mismatch in how data types are managed, leading to severe security flaws. In recognizing the severity of this issue, Google awarded $55,000 to Popax21 , the security researcher who brought this vulnerability to light. Thus, immediately updating Chrome to version 131 is crucial for protecting your systems against this threat. Understanding This CERT-In Chrome Advisory India's CERT-In acts as a national cybersecurity incident response agency. When they issue high-risk advisories, this signals immediate attention is warranted on threats they have identified. For example, their recent advisory regarding Google Chrome identifiedmultiple vulnerabilities that hackers could exploit to breach system integrity using the Chrome browser. They include: Type Confusion in V8. Out-of-bounds memory access in V8. Out-of-bounds write in V8 and Use after free in compositing. When Google Chrome, widely adopted due to its efficiency and cross-platform support, becomes a potential security risk, prompt action must be taken to mitigate exploits. An advisory is issued not simply as a call to update your browser but as a reminder to implement stronger cybersecurity practices to effectively defend against vulnerabilities like these. The Importance of Keeping Google Chrome Updated It is essential for all Chrome users to update Google Chrome to version 131.0.6778.264 right away to address the CVE-2025-0291 vulnerability. This update patches a critical security flaw that could otherwise be exploited to execute malicious code on your systems. To manually update Chrome, go to the Help section in your Chrome menu and select the About option. This will trigger an automatic security update. Don’t forget to restart your browser afterward to ensure the new security measures take effect. Given how serious this vulnerability is, it’s vital to handle the update process proactively instead of waiting for automatic updates. Taking immediate action reduces the risk of potential exploitation, which is why staying on top of security updates is a fundamental part of good cybersecurity practices. This step is not just a formality; it’s a necessary action to maintain the integrity and safety of your systems. Monitoring Security Advisories Staying up-to-date is key to effective cybersecurity management, and following advisories from CERT-In and other relevant bodies such as LinuxSecurity.com will keep you abreast of emerging threats and the best defenses against exploits. Such advisories provide invaluable insights into vulnerabilities' nature, impacts, and actions necessary for protection from exploitation. Security is anever-evolving field, with new vulnerabilities and threats emerging constantly, and staying current with advisories allows Linux admins to take proactive measures in securing their systems. Strengthening Browser Security Linux admins can take additional steps to strengthen browser security beyond simply updating the browser, such as adding security-focused extensions. Such extensions provide an added layer of protection by blocking malicious websites, tracking attempts, and protecting against phishing attempts - yet it's vitally important that they come from reliable sources, as malicious extensions could introduce additional vulnerabilities into your systems. Regular security audits and scans on systems running Chrome are other best practices that should be adhered to. Conducting security audits allows administrators to detect any potential vulnerabilities or misconfigurations that could be exploited. Such audits include checking for outdated software and available updates, verifying extensions installed via Chrome, and verifying browser security settings. By conducting regular security audits, Linux admins can identify potential threats early and address them effectively before they become significant threats. Educating Users A key cybersecurity strategy is cultivating a culture of awareness and responsiveness among users. Part of our role as Linux security admins should include informing our user base of the importance of browser updates and general security best practices. Training sessions and regular communications such as newsletters or emails can be practical training tools. Such efforts should focus on installing updates quickly, recognizing phishing attempts promptly, and reporting any suspicious activities to ensure an informed and engaged user base that helps strengthen the collective security posture of an organization. Implementing Layered Security Measures While updating Chrome and reviewing advisories are essential parts of comprehensive protection, developing abroader and multilayered strategy for comprehensive protection is equally as crucial. Layered security utilizes multiple defensive measures - like firewalls, IDS systems, and endpoint security solutions - to effectively guard systems and data against attacks. As well as technical measures, stringent access controls , and regular user permission reviews are essential steps toward mitigating the risk of unauthorized access. Ensuring users only have the minimum access necessary for performing their tasks helps eliminate potential attack vectors. Regular Backups and Incident Response Plans Even when all reasonable precautions have been taken to prevent security breaches, we must be prepared for any possible incidents that may arise. Regularly backing up critical data ensures that it can be restored without undue disruption in case of a breach. These backups should also be stored safely and periodically tested to verify their integrity and effectiveness. An incident response plan is of equal importance. A comprehensive incident response strategy allows Linux admins to respond swiftly and effectively in case of security breaches, including containment measures, communication protocols, and recovery procedures. Having such a plan, they can ensure a swift response that mitigates negative consequences. Future-Proofing Security Measures Cybersecurity is an evolving process that demands constant vigilance and adjustment. As new vulnerabilities emerge and attack methods advance, Linux administrators must remain proactive in adapting their security measures accordingly. Reevaluating security policies frequently, remaining informed of emerging threats, and taking advantage of advanced security technologies are all part of future-proofing defense strategies. Investment in ongoing training and development for security teams is paramount. By keeping abreast of new trends and technologies, Linux administrators can ensure that their security measures protect systems and data effectively. Our FinalThoughts on CERT-In's Recent Chrome Security Advisory CERT-In's high-risk advisory for Google Chrome users underscores the significance of practicing strong, proactive security strategies - such as keeping Google Chrome updated, keeping up-to-date on security alerts, and taking extra security precautions when managing risk. Linux admins can build a more assertive security posture within their organization by cultivating security awareness among users, conducting regular audits, and implementing robust incident response plans. Successful cybersecurity requires being aware, vigilant, informed, and ready for new challenges. By taking these proactive measures to protect against vulnerabilities, we can ensure a safer digital environment for ourselves and our users. . These Firefox exploits pose significant security risks, such as unauthorized system access and mandate prompt updates.. Google Chrome update, CERT-In advisory, browser security, remote code execution. . Brittany Day

Calendar%202 Jan 08, 2025 User Avatar Brittany Day Security Vulnerabilities
210

Google Chrome 124 Critical Security Update: Risks and Impact on Linux

The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw enabling remote attackers to execute arbitrary code, potentially resulting in data loss or full system compromise. The Google Stable channel has been updated to 124.0.6367.78 for Linux, mitigating these dangerous bugs. To help you safeguard your critical Linux systems and sensitive data, let's examine the flaws found in Chrome and Chromium - its open-source foundation, their security implications, and the importance of patching to secure your systems. . What Vulnerabilities Have Been Discovered & Fixed in Google Chrome? A critical Type Confusion vulnerability has been found in the ANGLE graphics layer engine ( CVE-2024-4058 ). This flaw allows attackers to remotely execute arbitrary code or perform sandbox escapes, which can result in unauthorized access, data loss, corruption, or complete system compromise. This presents a significant threat to user privacy and information security. This vulnerability was discovered by Toan (suto) Pham and Bao (zx) Pham of Qrious Secure. As a result, Google awarded them a $16,000 bounty. This raises questions about the effectiveness of Google's bounty program and whether the rewards are proportionate to the severity of the flaws discovered. It also highlights the role of ethical hacking and bug bounty programs in identifying and patching vulnerabilities. Another high-severity vulnerability identified is an out-of-bounds read in the V8 API ( CVE-2024-4059 ), also addressed in this update. However, Google Chrome withheld information regarding the reward for this issue. This lack of transparency raises concerns about how rewards are assigned in bug bounty programs and whether specific vulnerabilities are prioritized less. Admins and security practitioners must understand the full extent of the vulnerabilities and their implications, as this information can inform their risk assessment and mitigation strategies. Furthermore, a use-after-free condition hasbeen identified in the Dawn implementation of the WebGPU standard ( CVE-2024-4060 ). While details about the reward for this issue are also withheld, this issue emphasizes the importance of thoroughly testing and reviewing open-source software , as even popular and widely used projects can contain critical security flaws. What Are the Implications & Longterm Consequences of These Flaws? The implications of these vulnerabilities go beyond immediate risks. They raise questions about the effectiveness of the software development and testing processes employed by Google and the broader industry. We cannot understate the impact of these vulnerabilities on admins and organizations. They expose sensitive data, leading to financial loss and eroding trust in online platforms. Therefore, Linux admins and impacted organizations must immediately update Chrome to the latest version to ensure their systems are secure. You will find information on how to update to Chrome 124 here. Our Final Thoughts on These Google Chrome Bugs This critical security update for Google Chrome addresses several vulnerabilities, including a crucial flaw that enables attackers to steal data and fully compromise systems. In this article, we've highlighted the implications and raised questions about the effectiveness of bug bounty programs, the transparency of rewards, and the development and testing processes employed by Google. As security practitioners and members of the open-source community, it is crucial to understand the implications of these vulnerabilities and take immediate action to update systems and advocate for robust security practices . By staying informed and proactive , we can better protect ourselves and our organizations from potential cyber threats. . Assess fundamental weaknesses in the Chrome version 124 upgrade aimed at reducing vulnerabilities to data compromise and security breaches for Linux operating system users.. Chrome Security Update, Critical Flaws in Chrome, Linux Browser Security, BugBounty Program Insights. . Brittany Day

Calendar%202 May 30, 2024 User Avatar Brittany Day Security Vulnerabilities
82

Article 45: Assessing Risks to EU Web Security and User Privacy Concerns

The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate with governments to spy on encrypted traffic—and get away with it. Article 45 forbids browsers from enforcing modern security requirements on certain CAs without the approval of an EU member government. Which CAs? . Specifically, the CAs that were appointed by the government, which in some cases will be owned or operated by that selfsame government. That means cryptographic keys under one government’s control could be used to intercept HTTPS communication throughout the EU and beyond. This is a catastrophe for the privacy of everyone who uses the internet, but particularly for those who use the internet in the EU. Browser makers have not announced their plans yet, but it seems inevitable that they will have to create two versions of their software: one for the EU, with security checks removed, and another for the rest of the world, with security checks intact. We’ve been down this road before when export controls on cryptography meant browsers were released in two versions: strong cryptography for US users and weak cryptography for everyone else. It was a fundamentally inequitable situation, and the knock-on effects set back web security by decades. Read what LinuxSecurity.com Founder and Linux Security expert Dave Wreski has to say about the implications of this proposed regulation in a new LinkedIn update. . Investigating the impact of Article 45 on digital safety and personal data protection for online users within the European Union framework.. Web Security Regulations, Certificate Authorities EU, Privacy Encryption Laws, Internet Governance Compliance. . Brittany Day

Calendar%202 Nov 08, 2023 User Avatar Brittany Day Government
81

Mullvad Browser: Enhancing Online Privacy Without Using Tor

The Tor Project, the organization behind the anonymous network and browser, is helping launch a privacy-focused browser that’s made to connect to a VPN instead of a decentralized onion network. It’s called the Mullvad browser, named after the Mullvad VPN company it’s partnered with on the project, and it’s available for Windows, Mac, or Linux. . The Mullvad browser’s main goal is to make it harder for advertisers and other companies to track you across the internet. It does this by working to reduce your browser’s “fingerprint,” a term that describes all the metadata that sites can collect to uniquely identify your device. Your fingerprint can be made up of simple things, like what browser and operating system you’re using, to more invasive info, like what fonts and extensions you have installed, and what input / output devices your browser has access to. Looking at all those factors can make it easy to uniquely identify you just based on your fingerprint, without the need for things like cookies or other tracking tech. There are various tools that can show you how fingerprintable your browser is, but I personally recommend the EFF’s because it does a good job of explaining the results. . The Tor browser is built to enhance anonymity by minimizing tracking risks and safeguarding user privacy on the internet.. Privacy Browser,Mullvad VPN,Browser Fingerprinting,Tracking Prevention. . LinuxSecurity.com Team

Calendar%202 Apr 13, 2023 User Avatar LinuxSecurity.com Team Privacy
81

Comparing Brave And Tor Browsers For Maximum Privacy And Security

Brave and Tor are two of the most secure web browsers you can use, but which one comes out on top? . There are dozens of web browsers out there, some more popular than others, but only a select few can actually be considered both safe and private. Brave and the Tor Browser are certainly among them, and though they are similar in some respects, they are two very different pieces of software. So, how exactly do they compare when it comes to security and privacy? Let's find out below. . Brave and Tor browsers present unique advantages for security and privacy, catering to different user needs in their browsing experiences. Brave, Tor, web security, privacy comparison, secure browsing. . LinuxSecurity.com Team

Calendar%202 Aug 08, 2022 User Avatar LinuxSecurity.com Team Privacy
78

Firefox 95: Introducing RLBox Sandboxing For Enhanced Browser Security

Mozilla has released Firefox 95 for Linux, Windows and MacOS, which features a new security sandboxing technology called RLBox that uses WebAssembly to isolate potentially buggy code. . The sandboxing technology was co-developed by researchers at Mozilla, the University of California, San Diego, the University of Texas, Austin, and Stanford University. Mozilla released a preview of its for Firefox on Linux and macOS last December and has now extended it to Firefox for Windows, iOS and Android, according to Mozilla. RLBox works by separating third-party libraries from an app's native code. The first modules it isolates are Graphite , Hunspell , Ogg , Expat and Woff2 , with RLBox protecting Firefox against attacks on vulnerabilities in these libraries. . Firefox 95 introduces RLBox, enhancing user safety by sandboxing risky components, isolating bugs from external libraries and maintaining browser integrity.. Firefox RLBox, Sandboxing Technology, Web Security. . LinuxSecurity.com Team

Calendar%202 Dec 08, 2021 User Avatar LinuxSecurity.com Team Vendors/Products
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200