Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
209
software securitycode auditrisk analysis2021 Open Source Risk Analysis: Stale Code In Commercial Software
A new report shows that stale open-source code is rampant in commercial software, and organizations in all industries are struggling to manage open source risk. "In 2020 the percentage of codebases containing high-risk vulnerabilities jumped from 49 to 60 percent. What was more disturbing is that several of the top 10 open source vulnerabilities found in 2019 codebases reappeared in the 2020 audits, all with significant percentage increases." . Organizations, regardless of industry, must do a better job maintaining open source components given their critical nature in software, according to this year’s risk analysis report by cybersecurity firm Synopsys . Open source software is now the foundation for the vast majority of applications across all industries. But many of those industries are struggling to manage open source risk. Synopsys released the 2021 Open Source Security and Risk Analysis (OSSRA) report on April 13. The report examines open source audit results, including usage trends and best practices across commercial applications. . Due to escalating dangers highlighted in recent evaluations, organizations need to enhance the management of open source elements.. Open Source Management, Software Security, Risk Analysis. . Brittany Day
Jun 02, 2021
•
Security Trends
78
phpsecurity toolstatic analysisRIPS Static Analyzer For PHP Web Apps: Security Insights and Tools
RIPS is a tool written in PHP to find vulnerabilities using static source code analysis for PHP web applications. By tokenizing and parsing all source code files RIPS is able to transform PHP source code into a program model and to detect sensitive sinks (potentially vulnerable functions) that can be tainted by user input (influenced by a malicious user) during the program flow. . Besides the structured output of found vulnerabilities RIPS also offers an integrated code audit framework for further manual analysis. The link for this article located at Darknet is no longer available. . Besides the structured output of found vulnerabilities RIPS also offers an integrated code audit fra. written, vulnerabilities, using, static, source, analysis. . LinuxSecurity.com Team
Oct 21, 2014
•
Vendors/Products
67
security practicessoftware transparencycode auditCode Audits in FOSS: Assessing Current Practices and Challenges
"For years Linux has had a false sense of security, mainly because of the 'many eyes make bugs shallow' myth," Slashdot blogger hairyfeet suggested. "Seriously, show of hands: How many have done a code audit of LibreOffice? Firefox? Chromium? . The networking stack? Heck, how many here have done an extensive code audit on those bazillion little programs like screensavers and widgets and weather apps?" Few would deny that the world has changed since the National Security Agency's PRISM surveillance program was revealed, and not for the better. - See more at: The link for this article located at Linux Insider is no longer available. . The networking stack? Heck, how many here have done an extensive code audit on those bazillion littl. years, linux, false, sense, security, mainly, because, 'many, shall. . LinuxSecurity.com Team
Oct 03, 2013
•
Cryptography
83
security advisoryaccess breachcode auditPHP Developer Wiki Server Hack Details: Ongoing Code Audit and Exploit
According to the development team, access details for a number of accounts were stolen during a hack of the PHP developer wiki server wiki.php.net. Initial investigations have found that no other servers were compromised, but there was concern that the PHP source code might have been modified, as the stolen access data also provides access to the PHP repository.. The developers report that they therefore carried out a detailed code audit and checked every code commit in the subversion repository since version 5.3.5. According to a brief statement on www.php.net, no indication that changes had been made has been detected. The hack exploited a vulnerability in the CMS (DokuWiki), and unknown perpetrators were then able to escalate their privileges by use of a Linux root exploit. The link for this article located at H Security is no longer available. . Unauthorized entry into PHP developer repository has compromised account credentials, prompting a thorough code review. Ongoing investigation is in progress.. PHP Wiki Server Hack,DokuWiki Security,Code Audit Investigation,Linux Root Exploit. . LinuxSecurity.com Team
Mar 22, 2011
•
Hacks/Cracks
79
vulnerabilitysecurity toolopen sourcePalamida Launches New Reporting Solution for Open Source Security
Palamida announced that it has extended the reach of its extensive compliance library and launched a new service, the Vulnerability Reporting Solution (VRS). VRS works seamlessly with Palamida's code audit compliance solution, IP Amplifier, to identify, prioritize, and report known vulnerabilities within open source code used in customers' projects. . Existing vulnerability analysis solutions scan customers' proprietary code to identify potential vulnerability holes due to coding practices such as buffer overflow and similar problems. The VRS complements these tools to further enhance the IT Governance process by both pinpointing the use of open source content and reporting on known vulnerabilities based on aggregated information from many sources. The link for this article located at Net-Security is no longer available. . Existing vulnerability analysis solutions scan customers' proprietary code to identify potential vul. palamida, announced, extended, reach, extensive, compliance, library, launched. . LinuxSecurity.com Team
Apr 27, 2007
•
Security Projects
79
security toolsecurity flawcode analysisExploring RATS And Flawfinder For Source Code Security Improvement
David Wheeler, author of the Secure Programming HOWTO and the RATS development team from Secure Software Solutions today announced open source source code security flaw scanners. " RATS scans through code, finding potentially dangerous function calls. . . . . David Wheeler, author of the Secure Programming HOWTO and the RATS development team from Secure Software Solutions today announced open source source code security flaw scanners. " RATS scans through code, finding potentially dangerous function calls. The goal of this tool is not to definitively find bugs. Instead, this tool aims to provide a reasonable starting point for performing manual security audits." "Flawfinder" states it will "scan source code and identify out potential security flaws, ranking them by likely severity." Both teams mentioned they will be joining forces to produce a single GPLd 'best of breed' source code scanner. Currently only capable of scanning C/C++ code, "Flawfinder will miss some security problems, and point out issues that aren't really security problems, but nevertheless I think it can help track down security problems in code so that the code can be fixed." "Flawfinder is in its very early stages - I'm labelling it version "0.12". It works reliably, but its ruleset is currently small and rudimentary. It can already find some security problems now, but expanding its ruleset will give it much more power." Rough Auditing Tool for Security, the code analysis effort by SSS, looks also to be promising. "The initial vulnerability database is taken directly from things that could be easily found when starting with the forthcoming book, "Building Secure Software" by Viega and McGraw. We plan on actively maintaining RATS. We welcome any feedback, bug reports or contributions. Particularly, we would like to incorporate any vulnerability information people contribute. However, we will need to determine that information is public knowledge before we can incorporate it into the release. Feedback will be useful as we workon new versions of the tool. In the future, we plan on enhancing the tool with better analysis Additionally, we plan on extending the tool to handle other programming languages. We'd appreciate feedback on which languages are most important to people. The developers can be reached at:
Jun 19, 2002
•
Security Projects
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!