Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 17 articles for you...
83
malwareransomwarecyber threatREvil Ransomware: Analyzing Innovation and Affiliate Model for Success
Experts say that an affiliate-driven approach and regular malware refinements are key to REvil's ransomware success formula. . Just as cloud services have taken the business world by storm, the same can be said for ransomware, including one of today's most notorious strains: REvil. Also known as Sodinokibi and Sodin, REvil is a ransomware-as-a-service offering, which means a core group develops and maintains the ransomware code and makes it available to affiliates via a portal. Those affiliates and the core group of operators share in any profits that result from victims paying a ransom. Recent victims that have made payments include meat processor JBS , which paid $11 million in bitcoins. On Friday, remote management software provider Kaseya was the latest victim to come to light, as REvil's ransomware disrupted operations for its 36,000 customers worldwide, leading U.S. President Joe Biden to order the launch of a full-scale federal investigation . . Similar to how e-commerce has revolutionized retail, emerging threats such as DarkSide represent significant risks, constantly evolving to exploit vulnerabilities.. Ransomware Prevention, Malware Variants, Cyber Security, Ransomware Analysis. . LinuxSecurity.com Team
Jul 05, 2021
•
Hacks/Cracks
212
acquisitionLinux distributionMicrosoftMicrosoft Acquires Kinvolk For Azure Cloud Container Technology
Microsoft has bought Flatcar Linux distro maker Kinvolk to boost its Azure cloud services. Kinvolk specializes in software container environments on Azure and other public clouds, and its Flatcar dristro packs multiple optimizations for running containerized applications, which can be run unchanged in across multiple computing environments. . Microsoft Corp. has bought Kinvolk GmbH, the Berlin-based startup behind a specialized Linux distribution used to power software container environments on Azure and other public clouds. The technology giant announced the deal today in a post on its Azure blog. Kinvolk’s Linux distribution is called Flatcar Linux and packs multiple optimizations for running containerized applications, which can be run unchanged in across multiple computing environments. . Apple Inc. has acquired the tech company NextGen Innovations, located in London, which specializes in cutting-edge AI software.. Microsoft Acquisition, Flatcar Linux, Azure Cloud Services, Container Technology. . Brittany Day
Apr 30, 2021
•
Cloud Security
78
open sourceLinux integrationvirtualizationMicrosoft Azure Cloud Embraces Linux Integration for Services
With the growing popularity of Open Source, Microsoft is following the customers and the ecosystem - but pragmatic investment in Linux doesn't diminish the company's commitment to Windows. . 'Microsoft and Linux' should be a phrase we're used to hearing by now. Microsoft is a member of not only the Linux Foundation but also the Linux kernel security mailing list (a rather more select community). Microsoft is submitting patches to the Linux kernel "to create a complete virtualisation stack with Linux and Microsoft hypervisor". And when Microsoft wanted to add container support to Windows, it picked an open-source specification designed originally for Linux rather than the internal Windows-centric implementation it had already written. Now Azure customers get the same hybrid benefits for Linux support contracts as they do for Windows Server licences; Windows runs Linux binaries; some key Microsoft applications are available on Linux; and new services might be built with Linux. That's not just the obvious ones like the Azure Kubernetes Service: Microsoft Tunnel -- the VPN replacement for iOS and Android apps connecting to corporate resources on-premises through Azure AD -- installs as a Docker container on a Linux server. . Microsoft has evolved from a competitor to a collaborator with Linux, enhancing its cloud services through Azure and promoting open-source innovation and inclusivity. Microsoft Open Source, Linux Integration, Azure Cloud Services, Containerization, Virtualization Technology. . LinuxSecurity.com Team
Dec 03, 2020
•
Vendors/Products
209
software assurancecyber attackscomplianceUsing Static Analysis for Continuous Assurance in Open Source Security
Open Source lends itself to a new way of certifying software: Continuous Assurance. In this approach, automated tools and processes ensure that, as code changes, it continually satisfies compliance, quality, and security requirements. "Continuous Assurance integrates directly into development and benefits from the always-up-to-date nature of cloud services, making it a perfect match for Open Source." . Sonatype’s 2020 State of the Software Supply Chain Report found that next generation cyber-attacks actively targeting open-source soft- ware projects increased 430% over the past 12 months. Industry and the Open Source communities recognize heightened security risks and are working to solve these. For example, in August 2020 the Linux Foundation launched the Open Source Security Foundation (OpenSSF), billing itself as “a cross-industry collaboration that brings together leaders to improve the security of open-source software.” The Foundation notes how pervasive open source has become, and how critical it is to bring together open-source security initiatives and those who support them to advance open-source security for all stakeholders. . Continuous Assurance and static analysis play crucial roles in enhancing open source security and ensuring compliance throughout the software development lifecycle. open source security, static analysis, cyber attacks, software compliance, Continuous Assurance. . Brittany Day
Nov 04, 2020
•
Security Trends
79
quantum computingcloud servicesprocessor designIBM Launching 53-Qubit Quantum Computer At NY Data Center
IBMcontinues to push its quantum computing efforts forward and today announced that it will soon make a 53-qubit quantum computer available to clients of itsIBM Q Network. The new system, which is scheduled to go online in the middle of next month, will be the largest universal quantum computer available for external use yet. . The new machine will be part of IBM’s new Quantum Computation Center in New York State, which the company also announced today. The new center, which is essentially a data center for IBM’s quantum machines, will also feature five 20-qubit machines, but that number will grow to 14 within the next month. IBM promises a 95 percent service availability for its quantum machines. IBM notes that the new 53-qubit system introduces a number of new techniques that enable the company to launch larger, more reliable systems for cloud deployments. It features more compact custom electronics for improves scaling and lower error rates, as well as a new processor design. The link for this article located at TechCrunch is no longer available. . Google is preparing to unveil a 72-qubit quantum processor at its advanced Quantum Research Facility in California later this month.. Quantum Computing, IBM, Qubit Technology, Cloud Services. . LinuxSecurity.com Team
Sep 18, 2019
•
Security Projects
212
data securityautomationcloud computingEnhancing Business Operations Security Through Cloud Automation
Cloud computing has the potential to greatly improve an organization's security posture; however, many companies have the tendency to become overly-reliant on cloud computing services like Amazon Web Services to oversee all aspects of security, instead of taking full responsibility for their data security. Learn more: . The massive data breach at Capital One – America's seventh-largest bank, according to revenue – has challenged many common assumptions about cloud computing for the first time. Ironically, the incident, which exposed some106 million Capital One customers' accounts, has only reinforced the belief that the cloud remains the safest way to store sensitive data. The link for this article located at The Hacker News is no longer available. . Cloud automation greatly improves data security for businesses, protecting against breaches like Capital One's while enhancing compliance and threat response.. Cloud Security, Data Protection, Business Automation. . Brittany Day
Sep 16, 2019
•
Cloud Security
74
data protectionsecure connectivityvpnExploring Automation and Data Protection In Future VPNs
Interested in what the future has in store for VPNs? Virtual private networking is poised to become more automated and intelligent, especially as endpoints associated with cloud services and the IoT need protection. We'd love to hear your thoughts on this article. Market consolidation, transparent operation, greater intelligence: If this were Jeopardy, here's where you'd say, "What's the future of the VPN market look like?" Then you'd be on to Technology Forecasts for $500. What isn't in question is that virtual private networking technology will remain critical to protecting users, organizations, and their data. What is changing, according to industry experts, is the degree of automation and intelligence in VPN technology, not to mention the degree to which VPN functionality resides less in the hands of users (consistently cited as secure networking's weakest link) and more on the back end of the network. But continued growth of cloud services and the Internet of Things (Iot) means secure connectivity will still be needed. . The link for this article located at DarkReading is no longer available. . Specialists in the field analyze forecasts for VPN technologies, emphasizing automation advancement and moving beyond dependence on end-users.. VPN Future, Cloud Security, Network Automation, Transparent Operation, IoT Protection. . Brittany Day
Jul 24, 2019
•
Network Security
79
cyber threatsdata breachsecurity challengesExamining the Expansion of Cloud Security and Upcoming Obstacles Ahead
Two reports on cloud security were recently released: The 2019 Cloud Security Report and the Global Cloud Security Software Market report. The latter is a five-year forecast that covers 2019 through 2024. These reports showed where growth lies within the cloud security market and what challenges are presented to businesses who use or are looking to use cloud services. . Many businesses are actively transitioning to cloud services, and as a result, it's anticipated the cloud security market will grow at a CAGR of 4.98% over the next five years. In 2018, the market was valued at USD $28.1 billion, and it is anticipated to reach a market value of USD 35.6 billion by 2024. Technology is rapidly changing and becoming more complex, leaving room for the addition of innovative technologies such as cloud services for operations and data management. In addition, there is an increasing number of expensive cloud-related cyberattacks. According to the 2018 Cost of a Data Breach Study by Ponemon Institute, the average cost of a data breach in 2018 was USD 3.86 million. The ease of cloud services use combined with the high cost and increasing rate of cloud-related attacks is driving the cloud security market to rapid growth. The link for this article located at Security Today is no longer available. . As digital vulnerabilities rise and IT landscapes evolve, the need for stronger cloud security solutions is expected to grow, emphasizing the need for robust protections. Cloud Market Trends, Cybersecurity Challenges, Cloud Services Insights. . LinuxSecurity.com Team
Jun 25, 2019
•
Security Projects
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!