Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 66 articles for you...
83
ransomwarecorporate securityinfrastructure securityMajor Cybersecurity Breaches Trends And Impacts Of 2018
Looking back at the first six months of 2018, there haven't been as many government leaks and global ransomware attacks as there were by this time last year, but that's pretty much where the good news ends. . Corporate security isn't getting better fast enough, critical infrastructure security hangs in the balance, and state-backed hackers from around the world are getting bolder and more sophisticated. Here are the big digital security dramas that have played out so far this year—and it's only half over. The link for this article located at Wired is no longer available. . In 2023, the landscape of cybersecurity remains fraught with obstacles as organizational defenses falter and nation-backed assaults escalate.. Cybersecurity Breaches, Corporate Security Challenges, State Sponsored Attacks, Infrastructure Vulnerabilities, Ransomware Trends. . LinuxSecurity.com Team
Jul 09, 2018
•
Hacks/Cracks
81
data protectioncorporate securitycomplianceUnderstanding GDPR Compliance Impact on Global Companies
For many companies, GDPR has become a four-letter acronym. The European Union's new General Data Protection Rule – which applies to virtually any kind of data that can be used to identify a person – goes into effect May 25. And companies around the world are rushing to make sure they're in compliance, or at least can demonstrate that they're hard at work trying to meet the EU demands. . GDPR is designed to protect personal privacy, (hopefully) make companies more secure from data breaches and force them to get their collective hands around all the data they collect, use and distribute.. Firms around the globe strive to adhere to CCPA guidelines, aiming to protect individual privacy and bolster data defenses against unauthorized access.. GDPR Compliance, Data Privacy Regulation, Corporate Security. . LinuxSecurity.com Team
May 20, 2018
•
Privacy
82
cyber threatcorporate securityonline espionageFBI Warning: Chinese Cyber Spies Infiltrating U.S. Corporate Networks
Three days after Obama and Xi Jinping signed a historic agreement to curb online economic espionage, the FBI issued a fresh warning about Chinese spies in U.S. corporate networks. . The U.S. and China may have agreed not to hack each other . The U.S. and China may have agreed not to hack each other. three, obama, jinping, signed, historic, agreement, online, economic, espionage. . Dave Wreski
Mar 14, 2017
•
Government
82
corporate securitydata sharingcybersecurity billCongress Approves Protecting Cyber Networks Act For Data Sharing
Congress is hellbent on passing a cybersecurity bill that can stop the wave of hacker breaches hitting American corporations. And they. On Wednesday the House of Representatives voted 307-116 to pass the Protecting Cyber Networks Act, a bill designed to allow more fluid sharing of cybersecurity threat data between corporations and government agencies. The link for this article located at Wired is no longer available. . Congress has approved legislation aimed at enhancing information exchange regarding cybersecurity between private firms and federal entities.. Data Sharing, Cybersecurity Bill, Threat Intelligence, Corporate Security. . Dave Wreski
Apr 24, 2015
•
Government
83
threat mitigationcorporate securitypenetration testingEnhancing Corporate Security By Hiring Professional Hackers
In the hacking world, it takes one to know one. For many corporations, the best defense against hackers is to actually hire a hacker and pay him or her to break into their sites or databases and expose weaknesses in a benign manner. There aren. Now, add another feather to Rod The link for this article located at Times of Isreal is no longer available. . In the fast-paced realm of cybersecurity, hiring ethical hackers has become essential for businesses aiming to strengthen defenses against evolving threats.. Corporate Security Enhancement, Professional Hacker Defence, Penetration Testing Services, Threat Mitigation Strategies. . LinuxSecurity.com Team
Sep 17, 2013
•
Hacks/Cracks
74
data breachmalwarecorporate securityOak Ridge Lab Breach: Phishing Attack Leads To Serious Malware Threat
The successful use of phishing emails to breach secure organizations like Oak Ridge National Laboratory and EMC's RSA security division is a stark reminder of the serious threat posed by a type of attack that was previously dismissed as low-tech.. The Oak Ridge lab last month disclosed that sophisticated data-stealing malware had infiltrated its networks. The breach originated in a phishing email sent to about 570 employees. The email was disguised to look like a memo about benefits changes written by the lab's HR department. When a handful of employees clicked on the embedded link in the email, malware was downloaded to their computers. Such emails now appear to be the preferred method for breaking into corporate networks, said Anup Ghosh, founder of security firm Invincea. The link for this article located at Network World is no longer available. . The Lawrence Livermore facility uncovers a complex social engineering scheme that resulted in an extensive information leak and cyber intrusion.. Phishing Attacks, Malware Detection, Data Breach Response, Network Security Procedures. . Anthony Pell
May 09, 2011
•
Network Security
83
data breachcybersecuritythreat mitigationWeak Passwords Threaten Corporate Security and Data Integrity
Back in the 1990s fellow science and technology journalist Charles Mann and I wrote a book uncovering the true story of how a lone, young, cognitively impaired hacker with relatively few computer skills managed to perpetrate what was then the most extensive and scariest series of computer break-ins ever . At the end of the book, we predicted that no matter how much effort was poured into making the Internet safer, hackers would always be able to have a field day, partly for technical reasons but also because companies and individuals would never get it together to take simple precautions critical to safe computing. Sadly, Mann and I called it right. Viruses, trojans and spyware are bigger problems than ever. Employees unwittingly but routinely hand over their passwords to hackers who break into corporate databases to steal credit card and other information of thousands of customers. Private e-mail is rifled through and made public, and companies have their computers incapacitated by The link for this article located at NY Times is no longer available. . Uncover the dangers of inadequate password control, revealing how it paves the path to data leaks and cybersecurity threats that could jeopardize your business.. Password Management, Data Protection, Corporate Cybersecurity. . LinuxSecurity.com Team
Oct 26, 2010
•
Hacks/Cracks
83
information leaksocial engineeringcorporate securityFortune 500 Exposed: Social Engineering Contest Reveals Security Gaps
A few companies in the Fortune 500 need to upgrade their Web browsers. And while they're at it, a little in-house training on social engineering wouldn't be a bad idea, either.. Social engineering hackers -- people who trick employees into doing and saying things that they shouldn't -- took their best shot at the Fortune 500 during a contest at Defcon Friday and showed how easy it is to get people to talk, if only you tell the right lie. Contestants got IT staffers at major corporations, including Microsoft, Cisco Systems, Apple and Shell, to give up all sorts of information that could be used in a computer attack, including what browser and version number they were using (the first two companies called Friday were using IE6), what software they use to open pdf documents, their operating system and service pack number, their mail client, the antivirus software they use, and even the name of their local wireless network. The link for this article located at Network World is no longer available. . Social engineering hackers -- people who trick employees into doing and saying things that they shou. companies, fortune, upgrade, their, browsers, while, they're. . LinuxSecurity.com Team
Aug 02, 2010
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!