Network Security
system security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Vendors/Productsincident response cloud security
incident response cloud security Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
May 19, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
83
command executionmalware analysisdata theftStripedFly Malware Infects Over A Million Systems: Remote Access Threat
StripedFly malware is capable of grabbing screenshots and stealing passwords. . Cybersecurity researchers have discovered an “impressive” malware threat hiding in plain sight for half a decade. Called StripedFly, the malware’s earliest evidence of activity dates back to 2017, Kaspersky claims, where at one point it was discovered but dismissed as a “mere” cryptocurrency miner. However, a new investigation has shown that StripedFly is capable of a lot more than just mining cryptocurrency: it can execute commands remotely, grab screenshots and execute shellcodes, steal passwords and other sensitive data, record sounds using the integrated microphone, move to adjacent endpoints using previously stolen credentials, abuse the EternalBlue exploit to worm into other systems, and lastly - mine Monero. . Experts in cybersecurity have revealed the remarkable functions of StripedFly malware, which can effectively harvest confidential information and perform various operations.. StripedFly Malware, Remote Access Threat, Cybersecurity Analysis, Malicious Software. . LinuxSecurity.com Team
Oct 29, 2023
•
Hacks/Cracks
210
security advisoryaccess controlcommand executionLinux Sudo Advisory: Execute Commands As Root Without Permission
A Linux Sudo bug which allows users to run some restricted commands as root without permission has been discovered. Learn more about this security vulnerability in an informative Techworm article: . Sudo, one of the most commonly used utilities in Linux, has been found to have a vulnerability that could allow malicious users or programs to execute arbitrary commands as root on a targeted Linux system without clearance. The flaw was found to be working only on Linux systems that have a non-standard configuration. For those unaware, Sudo is aprogramforUnix-likecomputeroperating systemsthat allows users to run programs with the security privileges of another user, by default the‘superuser’ (a specialuser accountused forsystem administration). The link for this article located at Techworm is no longer available. . A newly found vulnerability in Sudo allows unauthorized users to execute commands with root privileges on Linux systems. Explore the implications and details of this threat. Sudo Bug, Command Access, Root Execution, Linux Security. . Brittany Day
Oct 16, 2019
•
Security Vulnerabilities
83
security advisorycommand executionLinux distributionVim And Neovim High-Risk Advisory: Arbitrary Command Execution Threat
Security expert Armin Razmjou recently detected a high-risk arbitrary OS command execution vulnerability (CVE-2019-12735) in Vim and Neovim. . For those unaware, Vim and Neovim are two most popular and powerful command-line text editing applications that come pre-installed in most of the Linux distros. Vim is a text editor that allows users to create, view or edit any file, including text, documents, and programming scripts. On the other hand, Neovim is a fork of Vim that aims to improve user experience, plugins, and GUIs (graphical user interfaces). As a result, the code execution vulnerability is also present in Neovim. The link for this article located at TechWorm is no longer available. . For those unaware, Vim and Neovim are two most popular and powerful command-line text editing applic. security, expert, armin, razmjou, recently, detected, high-risk, arbitrary, command, execution. . LinuxSecurity.com Team
Jun 11, 2019
•
Hacks/Cracks
74
command executionsystem administrationremote managementBoost Productivity With Parallel SSH Tools For Remote Execution
Many people use SSH to log in to remote machines, copy files around, and perform general system administration. If you want to increase your productivity with SSH, you can try a tool that lets you run commands on more than one remote machine at the same time. Parallel ssh, Cluster SSH, and ClusterIt let you specify commands in a single terminal window and send them to a collection of remote machines where they can be executed. Do you want to increase your productivity with SSH? Check out this article on 3 parallel SSH tools which let you run commands on multiple machines at the same time. . The link for this article located at linux.com is no longer available. . The link for this article located at linux.com is no longer available.. people, remote, machines, files, around, perform, general, system. . Brittany Day
Oct 31, 2008
•
Network Security
74
command executionremote accesssecure back doorSecure Back Door: Leverage SBD for Remote Command Execution Techniques
While a properly set up SSH service can give you secure remote access to a server, you might not like the idea of having an SSH server always running on your machine. Secure Back Door (SBD) can open an encrypted connection to your system, allowing you to remotely execute any operating system commands for example start your SSH or Web server or reboot the server. . SBD can listen on any port you like. If you don't specify a port it will default to port 31415. The transport protocol is SBD, which is based on a one-time pad symmetric key and a keyed-hash message authentication code (HMAC), which verify data integrity and the authenticity of a message. The client and server need to have the same key in order for system to accept remote commands. The keys are nothing but two identical files with randomly generated characters that you need to create only once and keep them secret. The link for this article located at linux.com is no longer available. . XYZ Corp offers a safeguarded virtual connection service, using port 2022 as its standard for secure operations management.. Secure Back Door, Remote Access Solution, SSH Alternatives, Port Configuration. . Bill Locke
May 09, 2007
•
Network Security
74
command executioninput validationvulnerability assessmentNew Linux Worm Exploits PHP Injection and Command Execution Threats
Over the weekend reports began to filter in of a new network worm that focused on a variety of vulnerabilities in products typically found in Linux-based Web servers. It's been tagged by many as a Linux problem, and is, in a practical sense, although most of the vulnerabilities aren't strictly Linux issues. So far there's no evidence it's a serious real-world problem, although the Internet Storm Center has been reporting that they are seeing multiple variants of it circulating around the net. . Most anti-virus companies and researchers are focusing on what is probably the most significant vulnerability attacked by the worm, the XML-RPC for PHP Remote Code Injection vulnerability. The others at issue are the AWStats Rawlog Plugin Logfile Parameter Input Validation Vulnerability and the Darryl Burgdorf Webhints Remote Command Execution Vulnerability, both less common than PHP. While the authors are clearly still feeling their way around, there's no reason to believe that this will be a real biggie. But if someone writes a well-designed 'grab bag' worm to exploit the various bugs in PHP and other products common on Linux servers, we could have a problem on our hands. Administrators of these systems don't always feel the pressure to apply updates as frantically as Windows admins. Complicating the problem is the fact that Linux distributors like Red Hat can take months to issue their own versions of updates. The link for this article located at eWeek is no longer available. . Investigators have zeroed in on major weaknesses being targeted by a recent Linux malware that affects multiple platforms.. Linux Worms, Remote Code Execution, Network Threats, Security Research, Vulnerability Assessment. . Brittany Day
Nov 09, 2005
•
Network Security
78
security advisorycriticalcommand executionLinux RealPlayer 10.0.0-10.0.5: Critical Command Execution Flaw
RealNetworks has patched the Linux media players that were susceptible to a zero-day attack for much of last week. . Both RealPlayer and Helix Player for Linux have been patched against a vulnerability that could let a hacker execute commands remotely once he'd convinced the user to open a malformed .rp (realpix) or .rt (realtext) file. According to RealNetworks, Linux RealPlayer 10 (10.0.0 through 10.0.5) and Helix Player (also versions 10.0.0 through 10.0.5) are vulnerable to attack; last week exploit code was published on the Internet, leading some security firms to label the bug as "critical." New 10.0.6 editions of Linux RealPlayer and Helix Player have been posted on RealNetworks' Web site for downloading. The Windows and Macintosh versions of RealPlayer are unaffected. The link for this article located at Security Pipeline is no longer available. . RealNetworks addressed security issues in Linux RealPlayer and Helix Player, correcting zero-day vulnerabilities that allowed for remote code execution.. Linux Media Players, Security Patch, Remote Execution, Helix Player, RealPlayer. . LinuxSecurity.com Team
Oct 04, 2005
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Explore top 10 tips to secure your open-source projects now. Read More