Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
83
threat analysiscybercrimecybersecurityMan-in-the-Browser Threats: Risks to Corporate Networks and Data Security
Cybercriminals are increasingly targeting the information assets of some of the world's most well-known organizations, according to the findings of a recent global study by McAfee and Science Applications International Corp. (SAIC) entitled "Underground Economies: Intellectual Capital and Sensitive Corporate Data Now the Latest Cybercrime Currency.". With firewalls, antivirus and other security mechanisms protecting corporate networks, how do attackers manage to penetrate enterprise computer systems? Simply by exploiting the weakest link in the security chain. One of the newest methods is tunneling in via employees' browsers using an attack known as "Man-in-the-Browser" (MitB). The link for this article located at Network World is no longer available. . Explore the ways in which Man-in-the-Middle threats breach business environments and compromise confidential information.. Man-in-the-Browser, cybersecurity threats, corporate data security, employee risk, enterprise protection. . LinuxSecurity.com Team
Mar 31, 2011
•
Hacks/Cracks
74
network trafficbandwidth managementcorporate networksEffective Strategies for Corporate Network Bandwidth Management
You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to . . . . You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to give them the information they need to take back control of their bandwidth. Of course, if your network is uncongested, network logons are quick, and users find all their business applications are running at top speed, then you're probably not too concerned about a handful of people using KazaA somewhere in your organization. Sadly, though, this ideal state of affairs is rarely witnessed, except perhaps in administrators' dreams. The truth is that most corporate networks carry far more network-clogging leisure traffic than they can cope with. That's because leisure apps are often particularly aggressive bandwidth users. The link for this article located at CrossNodes is no longer available. . Optimize your data usage smartly through dedicated applications as business systems face saturation from recreational browsing.. Bandwidth Management Tools, Corporate Network Control, Network Traffic Analysis. . Anthony Pell
Oct 23, 2003
•
Network Security
74
network securityremote accessbandwidth managementIdentifying Risks of Split Tunneling in Corporate Networks
At a time when protecting corporate networks is paramount, many users are steering clear of a feature of IP Security VPNs called split tunneling, a move that can give a false sense that remote-access networks are more secure than they really are, experts say. . . .. At a time when protecting corporate networks is paramount, many users are steering clear of a feature of IP Security VPNs called split tunneling, a move that can give a false sense that remote-access networks are more secure than they really are, experts say. Split tunneling was created to allow Web surfing and corporate VPN access simultaneously from remote PCs. The benefit of split tunneling is that corporations can conserve bandwidth needed for Internet access at VPN hub sites and reduce the load on VPN gateways. The link for this article located at IDG is no longer available. . As corporate cybersecurity gains importance, many employees hesitate to use split tunneling, uncertain about its security risks while working remotely. Corporate Network Security, IP Security VPN, Remote Access Solutions, Split Tunneling Risks. . Anthony Pell
Feb 24, 2003
•
Network Security
83
data breachcybersecurityethical hackingAdrian Lamo: Transforming From Homeless Hacker To Security Expert
Last January, Adrian Lamo awoke in the abandoned building near Philadelphia's Ben Franklin Bridge where he'd been squatting, went to a public computer with an Internet connection, and found a leak in the Excite@Home's supposedly airtight company network. Just another . . . . Last January, Adrian Lamo awoke in the abandoned building near Philadelphia's Ben Franklin Bridge where he'd been squatting, went to a public computer with an Internet connection, and found a leak in the Excite@Home's supposedly airtight company network. Just another day in the life of a young man who may be the world's most famous homeless hacker. More than a year later, Lamo is becoming widely known in hacker circles for tiptoeing into the networks of companies like Yahoo and WorldCom -- and then telling the corporate guys how he got there. The link for this article located at Wired is no longer available. . Adrian Lamo lived a dual life between homelessness and hacking, excelling in uncovering corporate vulnerabilities while advocating for digital ethics and transparency. Adrian Lamo, Ethical Hacking, Cybersecurity, Corporate Security. . LinuxSecurity.com Team
Mar 06, 2002
•
Hacks/Cracks
78
security solutionsmobile securitynetwork safetyMobile Device And Network Security Innovations At RSA Conference 2001
Products designed to boost security for mobile devices and on corporate networks are two of the main themes here at RSA Conference 2001 this week, with Motorola, Japan's Matsushita Electric Industrial, and the Internet division of Nokia all announcing new security . . . . Products designed to boost security for mobile devices and on corporate networks are two of the main themes here at RSA Conference 2001 this week, with Motorola, Japan's Matsushita Electric Industrial, and the Internet division of Nokia all announcing new security moves and partners. Motorola announced that VeriSign is providing it with an alternative technology to digital certificates for use in mobile phones and other wireless devices. The processing power available in wireless gadgets is limited, so devices cannot always check to see if a digital certificate has been revoked, the companies said. VeriSign has developed a system that issues a new digital certificate every 24 hours, which makes it easier to secure transactions on mobile devices, the companies said. The link for this article located at InfoWorld is no longer available. . Investigate protective measures for handheld gadgets and organizational infrastructures aimed at strengthening user security and confidentiality.. Mobile Security Solutions, Network Safety, Corporate Device Protection, Secure Transactions. . LinuxSecurity.com Team
Apr 12, 2001
•
Vendors/Products
83
intrusion detectioncyber threatsecurity techniqueCloaked Code Technique Emerges as New Threat to Corporate Networks
A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" . . . . A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" revealed a program he created that can camouflage the tiny programs that hackers generally use to crack through system security. The cloaking technique is aimed at foiling the pattern-recognition intelligence used by many intrusion detection systems, or IDSes, known as the burglar alarms of the Internet. "Trust me, this will blow away any pattern matching," said K2, who would not reveal his real name because he also works as a security consultant. When a security hole is found on a corporate network, hackers usually will find several ways to exploit it. To manage the onslaught, the makers of intrusion-detection systems continually update their own software to keep track of new variants of an already familiar theme. The link for this article located at ZDNet is no longer available. . Unveil a novel strategy for camouflaging applications designed to infiltrate business systems and its potential ramifications.. Cloaking Techniques, Corporate Cybersecurity, Cyber Threats. . LinuxSecurity.com Team
Apr 02, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!