Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 5 articles for you...
79
corporate espionagewireless attackWi-Fi printingWi-Fi Printing Risks Exposed by Drones and Mobile Devices Security Threats
You might think that working on a secured floor in a 30-story office tower puts you out of reach of Wi-Fi hackers out to steal your confidential documents. . But researchers in Singapore have demonstrated how attackers using a drone plus a mobile phone could easily intercept documents sent to a seemingly inaccessible Wi-Fi printer. The method they devised is actually intended to help organizations determine cheaply and easily if they have vulnerable open Wi-Fi devices that can be accessed from the sky. But the same technique could also be used by corporate spies intent on economic espionage. . But researchers in Singapore have demonstrated how attackers using a drone plus a mobile phone could. might, think, working, secured, floor, 30-story, office, tower, reach. . LinuxSecurity.com Team
Mar 14, 2017
•
Security Projects
76
data breachsecurity incidentsurveillanceHacking Team's 400GB Data Breach: CEO Response And Implications
The chief executive of Hacking Team has finally spoken out about the cyberattack which allowed sensitive corporate data, exploits and customer history to enter the public domain.. Founded in 2003, Hacking Team provides surveillance tools and spyware to government agencies, intelligence outfits and law enforcement worldwide. The company's operations have always been a closely-guarded secret; however, a recent cyberattack has changed the company -- potentially in a fatal manner. This month, the surveillance firm suffered a data breach leading to 400GB of stolen data being released online. WikiLeaks has also published a treasure trove of emails contained within the files. The link for this article located at ZDNet Security is no longer available. . The CEO of Hacking Team responds to the significant data breach that has unveiled critical information, discussing the repercussions for their business activities.. Hacking Team, data breach, cybersecurity incident, surveillance technology. . Alex
Jul 13, 2015
•
Organizations/Events
83
information leakdata breachspywareHacking Team Data Breach: 400GB Exposed Corporate and Customer Information
The cyberattacker who stole 400GB in corporate data belonging to spyware firm Hacking Team has come forward. Hacking Team has not had a good week. The Milan, Italy-based company, known for selling surveillance and spyware tools to government agencies and private companies, experienced a data breach over the weekend which led to the alleged theft of 400GB of corporate data.. The file, which has spread like wildfire through torrent sharing, magnets and mirrors, contains information including customer lists, financial statements and allegedly the source code of tools supplied by the company. The link for this article located at ZDNet Security is no longer available. . Significant leak of corporate information by CyberOps, revealing customer databases and accounting details. Discover more here.. Data Breach, Spyware Tools, Cybersecurity Incident, Corporate Intelligence. . LinuxSecurity.com Team
Jul 07, 2015
•
Hacks/Cracks
83
data breachcyber incidentcyberattackExxon, Shell, BP Cyber Incident: Data Theft From Chinese Servers
Computer hackers working through Internet servers in China broke into and stole proprietary information from the networks of six U.S. and European energy companies, including Exxon Mobil Corp., Royal Dutch Shell Plc and BP Plc, according to one of the companies and investigators who declined to be identified.. McAfee Inc., a cyber-security firm, reported Feb. 10 that such attacks had resulted in the loss of The link for this article located at Bloomberg is no longer available. . Attacks originating from Chinese networks led to considerable information breaches for leading oil firms, such as Chevron and Shell.. Data Theft, Cybersecurity, Energy Companies, Corporate Security. . LinuxSecurity.com Team
Feb 24, 2011
•
Hacks/Cracks
74
data protectionencryption techniquesemail encryptionEncrypt Your Email To Shield Against Corporate Espionage
Corporate espionage is big business these days. So it makes sense to deploy some kind of encryption system to ensure that prying eyes can. The link for this article located at eSecurityPlanet is no longer available. . In the digital era, safeguarding email content is essential. Encryption protects private messages from espionage, ensuring confidentiality and secure access.. Email Security, Encryption Techniques, Data Protection. . Bill Locke
Aug 23, 2007
•
Network Security
74
security advisoryremote exploitcorporate espionageBluetooth Security Advisory: Remote Data Access Risks Identified
Serious flaws discovered in Bluetooth technology used in mobile phones can let an attacker remotely download contact information from victims' address books, read their calendar appointments or peruse text messages on their phones to conduct corporate espionage. . . .. Serious flaws discovered in Bluetooth technology used in mobile phones can let an attacker remotely download contact information from victims' address books, read their calendar appointments or peruse text messages on their phones to conduct corporate espionage. An attacker could even plant phony text messages in a phone's memory, or turn the phone sitting in a victim's pocket or on a restaurant table top into a listening device to pick up private conversations in the phone's vicinity. Most types of attacks could be conducted without leaving a trace. Security professionals Adam Laurie and Martin Herfurt demonstrated the attacks last week at the Black Hat and DefCon security and hacker conferences in Las Vegas. Phone companies say the risk of this kind of attack is small, since the amount of time a victim would be vulnerable is minimal, and the attacker would have to be in proximity to the victim. But experiments, one using a common laptop and another using a prototype Bluetooth "rifle" that captured data from a mobile phone a mile away, have demonstrated that such attacks aren't so far-fetched. Laurie, chief security officer of London-based security and networking firm ALD, discovered the vulnerability last November. Using a program called Bluesnarf that he designed but hasn't released, Laurie modified the Bluetooth settings on a standard Bluetooth-enabled laptop to conduct the data-collection attacks. The link for this article located at wired.com is no longer available. . Critical vulnerabilities in Wi-Fi can allow hackers to gain unauthorized access to private information from smartphones.. Bluetooth Security Flaws, Mobile Device Vulnerabilities, Remote Data Access. . Anthony Pell
Aug 09, 2004
•
Network Security
81
identity theftdata exposureprivacy risksUnseen Dangers of Document Sharing: Corporate Espionage Risks
Many documents published online may unintentionally reveal sensitive corporate or personal information, according to a US computer researcher. Simon Byers, at AT&T's research laboratory in the US, was able to unearth hidden information from many thousands of Microsoft Word documents . . . . Many documents published online may unintentionally reveal sensitive corporate or personal information, according to a US computer researcher. Simon Byers, at AT&T's research laboratory in the US, was able to unearth hidden information from many thousands of Microsoft Word documents posted online using a few freely available software tools and some basic programming techniques. Sophisticated editing programs will often store information in a document file that the end user will not see. Storing recently deleted text can, for example, make editing a more efficient process. But Byers says it could also expose unaware users to significant risks. In his report, Byers suggests that a crook could analyse electronic documents to gather information that could help them carry out corporate espionage or steal someone else's identity to commit fraud. "It is feasible that an individual may include their social security number on copies of a resume sent to prospective employers, but delete it from the version put online to guard against identify theft," Byers writes. The link for this article located at NewScientist is no longer available. . Many documents published online may unintentionally reveal sensitive corporate or personal informati. documents, published, online, unintentionally, reveal, sensitive, corporate, personal, informati. . LinuxSecurity.com Team
Aug 19, 2003
•
Privacy
81
risk managementinformation securitydata theftData Theft Insights From Australia's Major Corporations
THE corporate spy trade is booming. One-quarter of Australia's largest companies admit they are involved in "competitive intelligence gathering", according to a PricewaterhouseCoopers survey. The information-gathering techniques are almost always legal and carried out by trained professionals - often former government intelligence operatives highly trained in obtaining military and economic secrets. . . .. THE corporate spy trade is booming. One-quarter of Australia's largest companies admit they are involved in "competitive intelligence gathering", according to a PricewaterhouseCoopers survey. The information-gathering techniques are almost always legal and carried out by trained professionals - often former government intelligence operatives highly trained in obtaining military and economic secrets. But the operatives were spying on competing companies rather than foreign governments, and many companies were easy targets, PwC dispute analysis and investigations director Richard Batten said. "Corporations have people trained to obtain raw data from a wide range of sources and apply traditional intelligence analysis techniques to produce usable information," he said. "It's worrying to find 62 per cent of companies have no protection in place to stop the loss or theft of intellectual property -- even though 30 per cent admit already experiencing at least one incident." The link for this article located at News.com is no longer available. . THE corporate spy trade is booming. One-quarter of Australia's largest companies admit they are invo. corporate, trade, booming, one-quarter, australia's, largest, companies, admit. . LinuxSecurity.com Team
Apr 10, 2002
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!