Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Stay Ahead With Linux Security News

Ghostlock Hero Esm H350
Security Vulnerabilities Price Tag%201security research open-source

When researchers announced GhostLock, many people focused on the exploit. What stood out to me wasn't just what the vulnerability could do, but how long it had remained hidden. The flaw had lived in the Linux kernel for roughly 15 years before it was publicly identified by researchers. That means the flaw survived hundreds of kernel releases and years of upstream development before it was publicly documented. It raises an uncomfortable question about one of open source's oldest assumptions....
1 min read Security Vulnerabilities
Ssh Esm H350
Network SecurityPrice Tag%201network protection system hardening

Spin up a fresh Linux VPS with default settings and check /var/log/auth.log ninety seconds later. There will already be failed login attempts — not dozens, hundreds, sometimes before the deployment script has even finished running. . Automated bots scan the entire IPv4 address space non-stop, and port 22 with password authentication open is exactly what they're looking for. Most cloud providers have seen enough of this that a new instance gets its first probe within a minute of going live....
4 - 7 min read Network Security
GITEA Vulv Linux Esm H350
Security Vulnerabilities Price Tag%201security advisory critical

If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability— CVE-2026-20896 —shipped directly in Gitea’s official Docker images. It’s a 9.8 CVSS-rated "open door" that lets any unauthenticated attacker stroll in and impersonate any user on your system, admin account included, without needing a password or a token. The reality? This isn't some complex, low-level kernel exploit. It’s a classic "secure-by-default"...
4 - 8 min read Security Vulnerabilities
2.Motherboard Esm H350
Desktop SecurityPrice Tag%201network security system hardening

There was a time when Linux meant server rooms and hobbyist forums. These days it's on regular laptops, and a big part of that is people getting fed up with commercial operating systems scraping their data, shipping telemetry nobody asked for, and boxing them into hardware ecosystems they can't opt out of. . None of that makes Linux immune to trouble though. Yes, it dodges most of the mainstream malware that everyone else deals with. But the software running on top, and honestly the person...
2 - 4 min read Desktop Security
Compromised Data Security Breach Vulnerability By Woolzian Gettyimages 475563052 2400x1600 100788413 Large Esm H350
Network SecurityPrice Tag%201privilege escalation open-source

There's a gap between what Linux systems log by default and what you actually need to detect a compromise. Most environments have logging active, which creates a sense of coverage that doesn't hold up under investigation. . When you start pulling logs after an incident, what you find is fragmented activity — a login here, a process there, but no clear narrative of how access was gained, what was executed, or how far the attacker moved. You piece together a timeline rather than reading one....
2 - 4 min read Network Security
Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -4 articles for you...
77
General Esm H240
Price Tag%201security advisoryupgrade recommendationBIND

Important ISC BIND Advisory: Immediate Upgrade to Version 9.2.1 Required

ISC is aware of several bugs which can result in serious vulnerabilities in BIND as distributed by ISC. Upgrading to BIND version 9.2.1 is strongly recommended. However, patches for BIND 8.3.3, 8.2.6 and 4.9.10 are now publicly available from ISC and new BIND 4 & 8 releases will be published in the next day or two . . . .. ISC is aware of several bugs which can result in serious vulnerabilities in BIND as distributed by ISC. Upgrading to BIND version 9.2.1 is strongly recommended. However, patches for BIND 8.3.3, 8.2.6 and 4.9.10 are now publicly available from ISC and new BIND 4 & 8 releases will be published in the next day or two . To: This email address is being protected from spambots. You need JavaScript enabled to view it. From: Peter Losher Subject: [UPDATE] Notice of serious vulnerabilities in ISC BIND 4 & 8 Date: Wed, 13 Nov 2002 17:10:53 -0800 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [NOTE: Apologies if your recieved this more than once ] ISC is aware of several bugs which can result in serious vulnerabilities in BIND as distributed by ISC. More information about these vulnerabilities can be found here: Upgrading to BIND version 9.2.1 is strongly recommended. However, patches for BIND 8.3.3, 8.2.6 and 4.9.10 are now publicly available from ISC and new BIND 4 & 8 releases will be published in the next day or two . You can find the patches here: - -- This email address is being protected from spambots. You need JavaScript enabled to view it. - Internet Software Consortium - OpenPGP E8048D08 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE90vgePtVx9OgEjQgRAtTsAKCfKHBcHhZrMThaAoY3TFQwmM2eNQCcC9hG UG4kQ+jiGe+t1etd7r4383E= =NQbZ -----END PGP SIGNATURE----- . ISC is aware of several bugs which can result in serious vulnerabilities in BIND as distributed by I. aware, which, serious, vulnerabilities, distributed. . LinuxSecurity.com Team

Calendar%202 Nov 13, 2002 •User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics