Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
77
security advisoryOpenSSLcorporate riskHeartbleed Analysis: 74% Global 2000 Remain Exposed To Flaw
According to research from Venafi, a vast majority of the world's top businesses are still vulnerable to Heartbleed, which was disclosed a year ago this month. The OpenSSL flaw impacted organizations both large and small, but the latest figures show that 74-percent of the Global 2000 remain vulnerable.. Heartbleed (CVE-2014-0160) was fully disclosed on April 7, 2014. The problematic code was originally introduced to the OpenSSL platform in 2012, but remained undetected until researchers performed an audit. The link for this article located at CSO Online is no longer available. . The Heartbleed vulnerability is still a pressing issue, as 74% of leading companies continue to be at risk. Explore the insights from the study.. Heartbleed Vulnerability, OpenSSL Flaw Analysis, Corporate Risk Assessment. . LinuxSecurity.com Team
Apr 08, 2015
•
Server Security
74
network securitysecurity educationsecurity challengesDan Jackson Discusses Network Security Issues and Prevention Strategies
"We've had a focus on education because we felt if we could demonstrate to the marketplace that we could sit in the wildest of environments, it would demonstrate true security functionality," said DeepNines President Dan Jackson. . . .. "We've had a focus on education because we felt if we could demonstrate to the marketplace that we could sit in the wildest of environments, it would demonstrate true security functionality," said DeepNines President Dan Jackson. "At universities you would not believe the spike in traffic and the spike in malicious traffic when school comes back in service." With their bottom lines and corporate reputations at risk, many security professionals, tired of being able only to react to viruses and worms, are looking for ways to prevent degradation and infection. Worms and viruses cost organizations billions of dollars and hundreds of man-hours. Spam has grown to represent between 60 percent and 70 percent of all e-mail, according to published reports. And even the companies charged with helping businesses secure their networks now are coming under attack. In April, for example, Cisco (Nasdaq: CSCO) warned customers about a hole in its Wireless LAN Solution Engine. The link for this article located at Alison Diana is no longer available. . Uncover key perspectives from Alex Turner on enhancing cybersecurity measures and thwarting illicit attacks across varied settings.. Network Security, Threat Prevention, Security Education. . Anthony Pell
Oct 18, 2004
•
Network Security
82
network securityinformation protectioncybersecurity threatMiddle East Focus on Information Security Governance in Corporations
DUBAI - A large number of corporations in Middle East are beginning to identify 'information security' as a core area of corporate governance, said sources from information security sector. The need of the hour for Middle East is to have effective Information Secured networks to protect from potential network threats. . . .. DUBAI - A large number of corporations in Middle East are beginning to identify 'information security' as a core area of corporate governance, said sources from information security sector. The need of the hour for Middle East is to have effective Information Secured networks to protect from potential network threats. Recently, according to Symantec's Internet Security Threat Report, Middle East leads the world as the source of Internet threats per capita. The link for this article located at Khaleej Times is no longer available. . DUBAI - A large number of corporations in Middle East are beginning to identify 'information securit. dubai, large, number, corporations, middle, beginning, identify, 'information, securit. . Anthony Pell
Sep 27, 2004
•
Government
74
network securityinstant messagingsoftware threatRisks of Using Self-Installed Instant Messaging in Corporate Networks
Instant messaging (IM) is taking off in companies but self-installed consumer versions of software that allows this type of communication are posing a "rampant security risk" on networks. Already some companies see IM as a time wasting technology - as . . . . Instant messaging (IM) is taking off in companies but self-installed consumer versions of software that allows this type of communication are posing a "rampant security risk" on networks. Already some companies see IM as a time wasting technology - as was the case when email, web access and even the telephone were first put on workers' desks - but the latest warning, levelled by Blue Coat Systems, is based on three key factors. The security appliance vendor highlights that IM is used to send files which firewalls don't pick up because they do not pass through corporate email systems; they are not checked for viruses; and they are not logged. The link for this article located at silicon.com is no longer available. . Real-time communication platforms can compromise organizational safety through unauthorized personal applications, endangering system stability.. Instant Messaging, Corporate Security, Software Risks. . Anthony Pell
Feb 06, 2003
•
Network Security
82
data securitydata integritysecurity complianceCorporate Data Security Measures Under Legislative Review
Corporate America's reluctance to be more forthcoming about internal data security measures has come under scrutiny on Capitol Hill. "I'm not sure the general population realizes just how interconnected all of the ordering processing systems are. My concerns are right in . . . . Corporate America's reluctance to be more forthcoming about internal data security measures has come under scrutiny on Capitol Hill. "I'm not sure the general population realizes just how interconnected all of the ordering processing systems are. My concerns are right in the core of our business," said Cangemi. However, there's a big knowledge gap in corporate America when it comes to risk, which stems from the fact that corporate boards are primarily staffed by CEOs and not CIOs, he said. "We're just getting to the point where there are [chief financial officers] on the board," said Cangemi. "There are no CIOs yet." The link for this article located at Computer World is no longer available. . The hesitation of businesses in the United States to reveal their internal cybersecurity protocols prompts worries regarding interlinked networks.. Data Governance, Corporate Risk, Security Compliance, Information Security, Data Integrity. . Anthony Pell
Apr 03, 2001
•
Government
83
security breachdefacementsystem vulnerabilityAnalysis of Recent Linux Defacements in Major Corporations
I had meant to do an update to my previous high profile summary of sorts. After drinking a Corona I began working on this post and it hit home yet again. Half way through writing this, another server on Hewlett Packard's network was defaced. I don't know what I find more ironic, that four HP servers were defaced this month, or that in each case they were running Windows NT or Linux instead of HP-UX (their own unix operating system). Toward the end of this list are two sites that also strike a bit of irony.. . .. I had meant to do an update to my previous high profile summary of sorts. After drinking a Corona I began working on this post and it hit home yet again. Half way through writing this, another server on Hewlett Packard's network was defaced. I don't know what I find more ironic, that four HP servers were defaced this month, or that in each case they were running Windows NT or Linux instead of HP-UX (their own unix operating system). Toward the end of this list are two sites that also strike a bit of irony. Toshiba Australia ICQ Compaq Computer Corp, Altavista Compaq Computer Corp Hewlett-Packard (Ironically, three of these machines running Windows NT instead of HP-UX, and one running Linux...) Olympic Committee Sony Taiwan Iomega Corporation The New York Times Intel Corporation Sharp Philippines Go.Com Gateway 2000 Inc PSINet NEC Chile Packard Bell Chile Memorex Sony Italy Lycos, Inc McDonalds UK Motorola Mexico It is always somewhat ironic when security companies or security related sites get defaced. Attrition is just waiting until we end up mirroring our own defacement. Computer Security Auditing Network SecureNet BR . Exposing the paradox in the latest noteworthy breaches affecting prominent companies and Linux infrastructures.. High Profile Defacements, Linux Breaches, IT Security Incidents. . LinuxSecurity.com Team
Feb 23, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!