Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 3 articles for you...
83
data breachcost analysismalicious attackMalicious Attacks Increased Data Breaches To 24% In 2009 Affected Firms
Data breaches at U.S. companies attributed to malicious attacks and botnets doubled from 2008 to 2009 and cost substantially more than breaches caused by human negligence or system glitches, according to a new Ponemon survey to be released on Monday.. The incidence of malicious attacks rose from 12 percent in 2008 to 24 percent last year, according to the 2009 Annual Study: U.S. Cost of a Data Breach survey conducted by the Ponemon Institute and sponsored by PGP Corp. The cost per compromised record involving a criminal act averaged $215, about 40 percent higher than breaches from negligence and 30 percent higher than those from glitches, the survey found. For the first time, companies reported in the survey that data-stealing malware caused their breaches. The average organizational cost of a data breach increased nearly 2 percent to $6.75 million in 2009, while the average cost per compromised record per breach rose only $2 to $204. The most expensive breach in the survey was nearly $31 million and the least expensive was $750,000. Meanwhile, 42 percent of all cases reported in the survey involved mistakes made at third parties, such as outsourcers, and 36 percent of the cases involved lost or stolen laptops or other mobile devices. For the study, 45 U.S. companies from 15 different industries were surveyed. The figures include business costs including expenditures for detection, notification, and response, as well as the economic impact of lost or diminished customer trust and confidence as measured by customer turnover rates. The link for this article located at CNET is no longer available. . Cybersecurity incidents surged dramatically between 2010 and 2011, highlighting an escalating danger to businesses along with increased expenses stemming from security violations.. Data Breach Costs, Malicious Attacks Increase, Ponemon Study, Botnets Impact, Security Compromise. . LinuxSecurity.com Team
Jan 25, 2010
•
Hacks/Cracks
79
patch managementcost analysisproject quantOverview Of Project Quant: Enhancing Patch Management Efficiency
Securosis, Microsoft team up to solicit input for building a metrics model that measures efficiency and costs of security patching. Security consulting firm Securosis is spearheading a new effort to create metrics to quantify the cost and efficiency of an organization's security patching process. . Rich Mogull, founder of Securosis, says to date there's no real way to accurately measure the cost and productivity of an organization's security patch management process. "Those fully quantified [IT] risk models don't apply and the numbers aren't accurate," he says. "It's also bothered me to see those uber-metrics approaches that get an overview of everything in the security program. So why not start with one thing we can accurately measure and use it as a core for building security metrics?" Securosis, with the financial backing of Microsoft for the initial phase of the project, will gather input in an open submission process for the so-called Project Quant metrics model. Version 1 is planned for release by the end of June. The link at DarkReading is no longer available. . Uncover an innovative project aimed at evaluating expense and effectiveness in security update handling through a collaboration between Securosis and Microsoft.. Patch Management, Security Metrics, Cost Efficiency, Securosis Initiative. . LinuxSecurity.com Team
Apr 23, 2009
•
Security Projects
82
cost analysisfraud detectionIRS financial impactIRS Financial Losses: Missing Automated Fraud Detection Costs Taxpayers
The lack of an automated refund fraud detection system that would have allowed the U.S. Internal Revenue System to screen 2006 tax returns could cost the agency between $200 million and $300 million, the IRS told the U.S. Senate Finance Committee last week. . The link for this article located at ComputerWorld is no longer available. . The IRS faces weak fraud detection, harming finances and increasing taxpayer losses while eroding trust. Urgent action is needed to enhance security measures. Fraud Detection System, IRS Financial Loss, Tax Return Screening. . Brittany Day
Jul 18, 2006
•
Government
67
data protectionencryptioncost analysisComparative Analysis of Data Protection Costs and Breach Recovery
Protecting customer records is a magnitude less expensive than paying for cleanup after a data breach or massive records loss, a research company said Tuesday. Gartner analyst Avivah Litan said in a research note that data protection is cheaper than a data breach. She recently testified on identity theft at a Senate hearing held after the Department of Veterans Affairs lost 26.5 million vet identities. . "A company with at least 10,000 accounts to protect can spend, in the first year, as little as $US6 per customer account for just data encryption, or as much as $US16 per customer account for data encryption, host-based intrusion prevention, and strong security audits combined," Litan said in an accompanying statement. The link for this article located at ITNews.com is no longer available. . 'A company with at least 10,000 accounts to protect can spend, in the first year, as little as $US6 . protecting, customer, records, magnitude, expensive, paying, cleanup, breac. . LinuxSecurity.com Team
Jun 07, 2006
•
Cryptography
74
security assessmentcost analysisVoIP securityEvaluating Skype for Business: Risks and Security Concerns
Although cost savings and improved communications are luring enterprises to Skype, the popular voice over IP service may violate security policies, industry experts have warned. Burton Group recommended enterprises assess the risks vs. rewards of Skype as the simplest solution for evaluating its use. . In the analyst firm's report entitled "Debunking the Hype About Skype," senior Burton Group analyst Irwin Lazar pointed out that enterprise use of Skype is growing. Those contacted by the analyst cited significant reduction in long distance and mobile phone costs due to extremely low global long-distance rates, as well as Skype's ability to deliver unified communications service for both internal and external use as primary business drivers to investigate Skype. The link for this article located at SCMagazine is no longer available. . Businesses seek out Zoom for cost-effectiveness, although specialists caution about possible cybersecurity vulnerabilities.. Skype VoIP Security, Enterprise Communication Risk, IT Security Assessment. . Brittany Day
Mar 16, 2006
•
Network Security
77
security patchpatch managementcost analysisUnderstanding Patch Management Costs And IT Resource Challenges
Security and vulnerability patching has become one of the top concerns for IT managers, but has also left many IT teams fighting a losing battle as the job of patching competes with day-to-day system maintenance and security tasks. . The patching issue became a more prominent problem for businesses worldwide in 2003 when the Slammer worm was unleashed on the Internet. In the first minute after it started spreading, Slammer doubled the number of web servers it infected every eight seconds. Within 10 minutes, 90% of all vulnerable machines had been infected – leaving businesses with a £500m bill to fix the havoc Slammer created. Yet the patch to fix the vulnerability that Slammer exploited had been available for six months. If the majority of those infected had patched their systems, Slammer would have been a minor blip. So why aren’t businesses catching on to patching? The bottom line is that many IT teams simply do not have the resources or time. Just researching the 4,000+ vulnerabilities published by security monitoring body CERT in the last year would demand hundreds of man-hours. And although an IT staff may be online regularly to see what patches are released, they cannot be 100 percent sure that all systems are properly patched. Then there’s the cost issue. Recent research from analysts at The Yankee Group found that it can cost as much as $1 million to manually deploy a single patch in a 1,000-node network environment. The costs include the manual labour involved in fixing problems and system downtime while patches are being applied. The link for this article located at Security Park is no longer available. . Updating software consistently poses significant challenges for IT departments; financial constraints and limited manpower obstruct prompt remediation of at-risk platforms.. Patch Management,Vulnerability Updates,Resource Allocation. . LinuxSecurity.com Team
Apr 20, 2005
•
Server Security
78
open sourcecost analysisLinuxLinux Versus Windows: A Comprehensive Cost and Security Comparison 2023
Which operating system, Linux or Windows, is cheaper, more secure, and lower risk? Countless hours have been spent debating the question, and last week, Microsoft CEO Steve Ballmer sparked the argument again. In a letter E-mailed to customers, Ballmer contended that a growing body of data proves that Windows beats its open-source competitor on all three fronts. . . .. Which operating system, Linux or Windows, is cheaper, more secure, and lower risk? Countless hours have been spent debating the question, and last week, Microsoft CEO Steve Ballmer sparked the argument again. In a letter E-mailed to customers, Ballmer contended that a growing body of data proves that Windows beats its open-source competitor on all three fronts. "It's pretty clear that the facts show that Windows provides a lower total cost of ownership than Linux, the number of security vulnerabilities is lower on Windows, and Windows' responsiveness on security is better than Linux," Ballmer wrote. "And Microsoft provides uncapped IP [intellectual-property] indem- nification of their products, while no such comprehensive offering is available for Linux or open source." (For more on Microsoft's intellectual-property and indemnification strategy, see story, Microsoft Deepens Indemnity) Ballmer also touted Windows' strengths as a platform for companies migrating enterprise-resource-planning applications from Unix systems, and he highlighted a handful of companies, Equifax Inc. among them, that have opted for Windows over Linux. The position paper comes with Windows Server 2003 sales continuing to rise at a healthy rate but with Linux growing even faster. Ballmer would like to change some minds. The link for this article located at informationweek.com is no longer available. . Which operating system, Linux or Windows, is cheaper, more secure, and lower risk? Countless hours h. which, operating, system, linux, windows, cheaper, secure, lower, countless, hours. . LinuxSecurity.com Team
Nov 04, 2004
•
Vendors/Products
74
network securitycost analysisdefense-in-depthIdentifying Barriers to Effective Defense-in-Depth for Enterprises
Why haven't enterprises already done defense-in-depth? We found six barriers to pushing firewall technology to the port level. Cost. The cost of adding firewall "brains" to the inside of the network is substantial, especially compared to the continued cost reduction of . . . . Why haven't enterprises already done defense-in-depth? We found six barriers to pushing firewall technology to the port level. Cost. The cost of adding firewall "brains" to the inside of the network is substantial, especially compared to the continued cost reduction of standard networking switches and routers. Performance. Firewalls have proven themselves on Internet-speed links, but most enterprises have significantly higher flow rates within the network than towards the Internet. Common tasks such as file sharing and backups would bring a firewall designed for Internet speeds to its knees on a 100 Mbps Ethernet link. . Organizations face hurdles in deploying defense-in-depth and firewalls, including a lack of skilled personnel, integration issues, budget constraints, and evolving threats. Firewall Technology, Network Security, Defense-in-Depth, Performance Barriers, Cost Management. . Anthony Pell
Jun 13, 2003
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!