Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 6 articles for you...
67
web securitybest practicescryptanalysisResearch Reveals RC4 Attack Threatening Web Encryption Security
Two researchers with the University of Leuven have developed a new, more practical attack technique that exposes weaknesses in the RC4 encryption algorithm. . RC4 is one of the encryption techniques supported by HTTPS protocol, which ensures the security of web communications, and Mathy Vanhoef and Frank Piessens indicated that their technique is so effective that users may want to consider no longer using the algorithm. The link for this article located at SC Magazine is no longer available. . Experts have uncovered an innovative method that capitalizes on vulnerabilities within the RC4 encryption standard implemented in secure web communications.. RC4 Attack, Web Security, Encryption Techniques, Cryptanalysis. . LinuxSecurity.com Team
Jul 21, 2015
•
Cryptography
67
auditbackdoorcryptanalysisTrueCrypt Audit Results: No Backdoors Found In Cryptanalysis
The results are in from the cryptanalysis phase of the TrueCrypt audit, and they show. . The results are in from the cryptanalysis phase of the TrueCrypt audit, and they show. results, cryptanalysis, phase, truecrypt, audit. . LinuxSecurity.com Team
Apr 03, 2015
•
Cryptography
67
GnuPGcyber threatcryptanalysisAcoustic Cryptanalysis: Key Extraction From GnuPG RSA Keys
Here, we describe a new acoustic cryptanalysis key extraction attack, applicable to GnuPG's current implementation of RSA. The attack can extract full 4096-bit RSA decryption keys from laptop computers (of various models), within an hour, using the sound generated by the computer during the decryption of some chosen ciphertexts.. We experimentally demonstrate that such attacks can be carried out, using either a plain mobile phone placed next to the computer, or a more sensitive microphone placed 4 meters away. The link for this article located at Schneier on Security is no longer available. . We experimentally demonstrate that such attacks can be carried out, using either a plain mobile phon. describe, acoustic, cryptanalysis, extraction, attack, applicable, gnupg's, current. . LinuxSecurity.com Team
Dec 19, 2013
•
Cryptography
67
security incidentNSAcryptanalysisNSA's Cryptanalysts Decoded Kryptos Sculpture Before CIA's Attempts
It took more than eight years for a CIA analyst and a California computer scientist to crack three of the four coded messages on the CIA. Little did either of them know that a small group of cryptanalysts inside the NSA had beat them to it, and deciphered the same three sections of Kryptos years earlier The link for this article located at Wired is no longer available. . Codebreakers at the NSA unraveled the mysteries of Kryptos long before CIA agents managed to decode its messages, exposing hidden truths.. Kryptos Sculpture, NSA Cryptanalysis, CIA Codebreaking, Cryptography Secrets. . LinuxSecurity.com Team
Jul 11, 2013
•
Cryptography
67
cryptanalysisEnigma machineBletchley ParkBletchley Park Codebreakers of WWII: Secrets of the Enigma Machine
During World War II, Britain's brightest minds routinely decoded encrypted German military messages, an effort believed to have significantly shortened the war and saved the country further devastation.. The mathematicians and cryptography experts at Bletchley Park broke the code used by Germany's Enigma machine, a complex encryption device used across the German military. By January 1940, Britain was decoding the majority of the Enigma-encrypted radio messages intercepted by its signal intelligence stations. Since then, buildings on the 25-acre Bletchley Park estate have fallen into disrepair: At one stage the site was close to being demolished to make way for a supermarket and housing development, and efforts to raise money to preserve it have struggled. The link for this article located at Tech News World is no longer available. . The talented analysts at Bletchley Park cracked the Enigma code utilized by Germany in the Second World War, uncovering pivotal information that influenced the course of history.. Bletchley Park, WWII Codebreaking, Cryptanalysis, Military History, Enigma Machine. . LinuxSecurity.com Team
Jun 07, 2010
•
Cryptography
67
security advisorydata encryptioncryptanalysisNew Practical Attack On AES-256: Security Risks Explored
Read Bruce Schneier's always on-target analysis of cryptography, this time with information on the new attack against AES. A new and very impressive attack against AES has just been announced. Over the past couple of months, there have been two (the second blogged about here) new cryptanalysis papers on AES. The attacks presented in the paper are not practical -- they're far too complex, they're related-key attacks, and they're against larger-key versions and not the 128-bit version that most implementations use -- but they are impressive pieces of work all the same. This new attack, by Alex Biryukov, Orr Dunkelman, Nathan Keller, Dmitry Khovratovich, and Adi Shamir, is much more devastating. It is a completely practical attack against ten-round AES-256: . Abstract. AES is the best known and most widely used block cipher. Its three versions (AES-128, AES-192, and AES-256) differ in their key sizes (128 bits, 192 bits and 256 bits) and in their number of rounds (10, 12, and 14, respectively). In the case of AES-128, there is no known attack which is faster than the 2128 complexity of exhaustive search. However, AES-192 and AES-256 were recently shown to be breakable by attacks which require 2176 and 2119 time, respectively. While these complexities are much faster than exhaustive search, they are completely non-practical, and do not seem to pose any real threat to the security of AES-based systems. In this paper we describe several attacks which can break with practical complexity variants of AES-256 whose number of rounds are comparable to that of AES-128. One of our attacks uses only two related keys and 239 time to recover the complete 256-bit key of a 9-round version of AES-256 (the best previous attack on this variant required 4 related keys and 2120 time). Another attack can break a 10 round version of AES-256 in 245 time, but it uses a stronger type of related subkey attack (the best previous attack on this variant required 64 related keys and 2172 time). The link for thisarticle located at Bruce Schneier is no longer available. . Abstract. AES is the best known and most widely used block cipher. Its three versions (AES-128, AES-. bruce, schneier's, always, on-target, analysis, cryptography, information. . LinuxSecurity.com Team
Aug 03, 2009
•
Cryptography
67
cryptanalysisaes attackcryptographic attackProgress in AES Attacks: Implications on Encryption Security
Cryptologists have now developed even more sophisticated attacks on AES encryption systems. According to crypto expert Bruce Schneier, a team consisting of Alex Biryukov, Orr Dunkelman, Nathan Keller, Dmitry Khovratovich and Adi Shamir have managed to crack reduced versions of AES-256 in practical length of time. Attacking nine-round AES-256 required 239 time, which is even feasible with an ordinary PC, while ten-round would require 245. The time required for eleven rounds, however, is just above practicality at 270. The attack exploits a vulnerability in the key schedule, a function AES-256 uses to derive sub-keys from the main key.. While the new attacks represent major progress in the cryptanalysis of AES, they are still irrelevant for attacks against real-world AES implementations and this is not only because of the reduced number of rounds (by default, AES-256 uses 14 rounds). Also, the attack is a related-key attack, which means that the attacker must have access to the plaintext of several units of ciphertext encrypted with keys that are related in a specific way. Such scenarios can theoretically only be found, for example, in hard disk encryption and network protocols, where the individual block keys are generated in such a weak way. The link for this article located at H Security is no longer available. . New developments in RSA cryptanalysis reveal noteworthy vulnerabilities in secure communications; however, they fall short of practical implementation.. AES Attacks,Cryptographic Security,Data Protection Techniques,Key Management. . LinuxSecurity.com Team
Aug 02, 2009
•
Cryptography
67
cryptanalysisblock cipherlearning techniquesOrganized Cryptanalysis Techniques for Effective Learning
Studying cryptanalysis is difficult because there is no standard textbook, and no way of knowing which cryptanalytic problems are suitable for different levels of students. This paper attempts to organize the existing literature of block-cipher cryptanalysis in a way that students can use to learn cryptanalytic techniques and ways to break new algorithms. . The link for this article located at Schneier.com is no longer available. . The link for this article located at Schneier.com is no longer available.. studying, cryptanalysis, difficult, because, there, standard, textbook, knowing. . LinuxSecurity.com Team
May 24, 2006
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!