Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
81
cybersecurityanti-phishingcountermeasuresSeven Innovative Anti-Phishing Projects and Emerging Trends in Security
Seven anti-phishing projects, I especially find the browser recon and countermeasures one as a trendy concept, as phishers are already taking advantage of vulnerabilities allowing them to figure out a browser's history, thus establish a more reputable communication with the victim -- adaptive phishing. . The link for this article located at Dancho Danchev is no longer available. . The link for this article located at Dancho Danchev is no longer available.. seven, anti-phishing, projects, especially, browser, recon, countermeasures, trend. . LinuxSecurity.com Team
Oct 06, 2006
•
Privacy
67
countermeasuressmartcard protectionpower analysisSmartcard Protection Strategies Against Differential Power Analysis
I was at CardTech/SecurTech 2006 recently and had a meeting with Cryptography Research, a company focused on securing smartcards. I spoke to Kit Rodgers, VP, and Ken Warren, Manager, about smartcard tamper resistance with differential power analysis countermeasures. Listen to the interview with Cryptography Research Listen Now. The link for this article located at InfoWorld is no longer available. . The link for this article located at InfoWorld is no longer available. . cardtech/securtech, recently, meeting, cryptography, research, company. . LinuxSecurity.com Team
May 15, 2006
•
Cryptography
74
cybersecuritytraffic analysisevasion researchFuture Worms Evasion Research and Impact on Internet Sensors
Future worms could evade a network of early-warning sensors hidden across the Internet unless countermeasures are taken, according to new research. In a pair of papers presented at the Usenix Security Symposium here Thursday, computer scientists said would-be attackers can locate such sensors, which act as trip wires that detect unusual activity. That would permit nefarious activities to take place without detection. . Internet sensor networks, such as the University of Michigan's Internet Motion Sensor and the SANS Internet Storm Center, are groups of machines that monitor traffic across active networks and chunks of unused IP space. The sensor networks generate and publish statistical reports that permit an analyst to track the traffic, sniff out malicious activity and seek ways to combat it. Just as surveillance cameras are sometimes hidden, the locations of the Internet sensors are kept secret. "If the set of sensors is known, a malicious attacker could avoid the sensors entirely or could overwhelm the sensors with errant data," a team of computer scientists from the University of Wisconsin wrote in its award-winning paper titled "Mapping Internet Sensors with Probe Response Attacks." But the Wisconsin researchers discovered that the sensor maps furnish just enough information for someone to create an algorithm that can map the location of the sensors "even with reasonable constraint on bandwidth and resources," John Bethencourt, one of the paper's authors, said in his presentation.. Analysis indicates that emerging malware may bypass cybersecurity frameworks, necessitating advanced protective strategies.. Internet Sensor Networks, Evasion Techniques, Cybersecurity Research. . Brittany Day
Aug 05, 2005
•
Network Security
74
network securitymalwarecountermeasuresUnderstanding Spyware Risks and Protection for Enterprise Networks
Spyware is challenging spam and viruses for the top spot on IT worry lists. Spyware poses considerable threats and risks to enterprise networks and remediation and countermeasures are now being regarded as critical to network security. . How Spyware Threatens Enterprises Spyware is defined as covertly installed software that hijacks web browsers, invades Internet user privacy, displays unsolicited and offensive advertising, and impedes PC performance. The most commonly cited spyware issues worrying enterprise IT staff are loss of productivity and increased helpdesk costs; liability associated with privacy violations; intellectual property theft, information and premature disclosure; and loss of credibility and damage to brand. The link for this article located at Dave Piscitello is no longer available. . How Spyware Threatens Enterprises Spyware is defined as covertly installed software that hijacks web. spyware, challenging, viruses, worry, lists, poses, considerab. . Joe Shakespeare
Jan 11, 2005
•
Network Security
81
countermeasuresanti-spamdigital securityAT&T Anti-Spam Patent: Disrupting Filtering Technologies
Citing an "arms race" in the ongoing spam wars, AT&T defended its patenting of a technology to thwart antispam filters. The patent, awarded to AT&T on Nov. 4, describes a "system and method for counteracting message filtering." The patent . . . . Citing an "arms race" in the ongoing spam wars, AT&T defended its patenting of a technology to thwart antispam filters. The patent, awarded to AT&T on Nov. 4, describes a "system and method for counteracting message filtering." The patent details a way to trick filters that compare digital messages to known pieces of spam, altering each message so that no two are exactly the same. "In this way, spam countermeasures based upon duplicate detection schemes are foiled," according to the patent. AT&T's patent wins approval as spam and software patents separately preoccupy the Internet. Opponents, pointing to patent-infringement judgments like that won by Eolas Technologies at Microsoft's expense, say software patents have created a siege mentality in the industry. And the spam problem has resulted in a host of proposed solutions in the software, standards and legislative arenas. . Citing an 'arms race' in the ongoing spam wars, AT&T defended its patenting of a technology to thwar. citing, 'arms, race', ongoing, at&, defended, patenting, technology, thwar. . LinuxSecurity.com Team
Nov 19, 2003
•
Privacy
79
security techniquescountermeasuresinformation assuranceDeveloping A Detailed Information Assurance Framework For Security Services
I am presently working on creating a taxonomy of information assurance, based on the three aspects of: Security services Information states Security countermeasures These three aspects of Information Assurance (IA) were highlighted by John McCumber [1] as well as a team . . . . I am presently working on creating a taxonomy of information assurance, based on the three aspects of: Security services Information states Security countermeasures These three aspects of Information Assurance (IA) were highlighted by John McCumber [1] as well as a team of West Point researchers [2] as a component of works that define an integrated approach to security. Within the next 6 months, I would like to create a taxonomy that graphically depicts the relationships of these three aspects. My intent is that this taxonomy could be used by the academic community, industry, and government in improving the precision of communication used in discussing information assurance/security topics. I have searched the Internet widely for a taxonomy of IA, but I have not found anything that is sufficiently detailed for application with real world problems. I am posting my initial results here in hopes that an open collaboration process (much like the open source software movement) will yield a useful tool for the security community to use in addressing information assurance issues. The link for this article located at Abe Usher is no longer available. . I am presently working on creating a taxonomy of information assurance, based on the three aspects o. presently, working, creating, taxonomy, information, assurance, based, three, aspects. . LinuxSecurity.com Team
Aug 29, 2003
•
Security Projects
77
buffer overflowcountermeasuressystem securityIn-Depth Guide To Buffer Overflow Attacks And Prevention Strategies
Buffer overflow problems always have been associated with security vulnerabilities. In the past, lots of security breaches have occurred due to buffer overflow. This article attempts to explain what buffer overflow is, how it can be exploited and what countermeasures can be taken to avoid it. . . .. Buffer overflow problems always have been associated with security vulnerabilities. In the past, lots of security breaches have occurred due to buffer overflow. This article attempts to explain what buffer overflow is, how it can be exploited and what countermeasures can be taken to avoid it. Knowledge of C or any other high level language is essential to this discussion. Basic knowledge of process memory layout is useful, but not necessary. Also, all the discussions are based on Linux running on x86 platform. The basic concepts of buffer overflow, however, are the same no matter what platform and operating system is used. The link for this article located at Linux Journal is no longer available. . Buffer overflow problems always have been associated with security vulnerabilities. In the past, lot. buffer, overflow, problems, always, associated, security, vulnerabilities. . LinuxSecurity.com Team
Mar 10, 2003
•
Server Security
81
countermeasurescommunication securityspam managementEmail Disruption One-Third Spam Flooding Inboxes - Challenges and Solutions
One-third of the 30 billion e-mails sent worldwide each day are spam. That's 10 billion daily pitches for herbal Viagra, Nigerian scams, and genital-enlarging creams piling up in our inboxes. Neither legislation nor litigation against spammers has stemmed the tide, and they're not going to have much of an effect in the future. . .. One-third of the 30 billion e-mails sent worldwide each day are spam. That's 10 billion daily pitches for herbal Viagra, Nigerian scams, and genital-enlarging creams piling up in our inboxes. Neither legislation nor litigation against spammers has stemmed the tide, and they're not going to have much of an effect in the future , either. It's time to give up: Despite the best efforts of legislators, lawyers, and computer programmers, spam has won. Spam is killing e-mail. ...Or at least it's about to destroy the e-mail we're used to: the tool that lets a stranger respond to something you posted on your Web site or that lets a potential client contact you after reading an article you wrote. E-mail is pervasive because it's simple to use, remarkably flexible, and it reaches everyone. The trouble is that e-mail is too good at that third task. Because e-mail inboxes are open to anyone, longtime Internet users now receive hundreds of spams per day, making e-mail virtually unusable without countermeasures. SPAMMERS AND FILTERS The most common countermeasure, server-side filtering, has serious limitations. No automated system can identify spam as well as a human can. Internet service providers certainly try: They block known spammer addresses and use algorithms to identify spam based on an e-mail's contents, subject line, or other headers. AOL and MSN both trumpet spam filtering systems like this in their latest software, and Yahoo! and Microsoft's Hotmail offer junk-mail filters for their Web-based e-mail services. But the filters are running out of gas. The spammers keep multiplying, and they keep finding clever ways to fool the systems designed to stop them. Promising newcomers suchas CloudMark, which taps the collective power of e-mail recipients to identify spam, may improve things for a while. But there will always be a trade-off between catching all the spam and ensuring that every piece of legitimate e-mail gets through. RISE OF `WHITELISTS' So, sophisticated Internet users are turning to a new approach. Instead of trying to block spam while allowing everything else, these users employ software that blocks everything except messages from already known, accepted senders. These systems, called "whitelists," change e-mail from an open system to a closed one. Whitelist applications available today include MailFrontier , ChoiceMail from DigiPortal, Vanquish, and the freeware Tagged Message Delivery Agent. There's also a whitelist option built into Hotmail, known as the "exclusive" setting. Though it's hidden in the preferences menu (click "Options," then "Junk Mail Filter"), more than 10 percent of Hotmail users reportedly invoke it. Before long, expect all e-mail applications to offer this function. Whitelists typically allow e-mail from everyone in a user's existing address book. Other, unknown senders receive an automated reply, asking them to take further action, such as explain who they are. Or senders may be asked to identify a partially obscured image of a word. A person can make out the word, but automated spammer software can't. The link for this article located at MSNBC is no longer available. . One-third of the 30 billion e-mails sent worldwide each day are spam. That's 10 billion daily pitches overtaking inboxes.. Spam Management, Communication Security, Email Disruption. . LinuxSecurity.com Team
Nov 18, 2002
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!