Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 228 articles for you...
78
security advisoryUbuntucryptographyUbuntu 25.04: Major Systemd Updates and Security Enhancements for Admins
As Ubuntu prepares to release its latest version, Ubuntu 25.04 "Plucky Puffin" on April 17, Linux security admins should gear up for pivotal changes that could transform their system management routines. This release introduces significant updates, with systemd leading the charge by phasing out support for utmp, cgroup v1, and System V service scripts. Such deprecations might catch some off guard, mainly since they affect key tools and demand a shift to modern alternatives like cgroup v2 and native systemd units. . Additionally, Ubuntu 25.04 makes a notable leap forward in time synchronization security with Chrony’s default use of Network Time Security (NTS). This move underscores the importance of encrypted communications in safeguarding against man-in-the-middle attacks . Paired with substantial upgrades to cryptographic libraries such as OpenSSL and GnuTLS, these changes indicate a proactive stance towards more secure, resilient systems. Let's examine why admins like you and I should consider upgrading to Ubuntu 25.04 to address evolving security standards and ensure seamless security management. Systemd Update and Deprecations: Adjusting Monitoring and Management One of Plucky Puffin’s significant changes is its adoption of systemd version 257.4 . With it comes removing support for utmp, a component many administrators rely on for tracking user sessions through utilities like who from coreutils. This adjustment isn't just a minor tweak; it can impact how we monitor user activity and manage sessions. Utmp has been part of the historical fabric of Unix-like systems, enabling commands that help monitor user logins. However, this legacy component is now being retired in favor of more modern and secure approaches. Admins must update their scripts and monitoring tools to align with these changes, potentially shifting to alternative methods or tools that do not rely on utmp. Moreover, another significant change is systemd’s move away from cgroup v1 and System V service scripts. Tomaintain service compatibility, system administrators must transition to cgroup v2 and systemd unit files. While cgroup v2 offers improved resource management and a more consistent user experience, the shift can be daunting for those heavily invested in the previous setups. The key is to begin transitioning workflows now, ensuring that dependencies are updated and scripts are modified to accommodate this new approach. Enhancing Time Synchronization with Chrony’s NTS Support Another noteworthy enhancement in Ubuntu 25.04 is Chrony's default use of Network Time Security (NTS). Accurate timekeeping is foundational to many security protocols, including authentication, logging, and cryptographic validation. Traditional Network Time Protocol (NTP) has been a cornerstone for ensuring systems across networks stay synchronized. However, NTP comes with its own set of vulnerabilities, particularly susceptibility to man-in-the-middle attacks. NTS addresses these concerns by adding a layer of encryption to time synchronization. This shift means that the default Chrony installation in Ubuntu 25.04 will reach out to NTS servers, which inherently secure communication channels against tampering and eavesdropping. NTS employs symmetric cryptography to validate responses and ensure the integrity of the time data received by clients. This update means reviewing and potentially reconfiguring firewall rules to accommodate new ports and protocols (like port 4460/tcp for NTS/KE). While it requires some upfront adjustment, adopting NTS aids in creating a more secure and reliable time synchronization framework, aligning better with today’s security landscape. The move to NTS exemplifies how Ubuntu is not just updating its features arbitrarily but is genuinely enhancing the security fundamentals of its systems. Upgrading Cryptographic Libraries for Better Security Ubuntu 25.04's third security enhancement relies on crucial updates to cryptographic libraries, specifically OpenSSL 3.4.1 and GnuTLS 3.8.9 , whichbring the latest fixes and improvements from these libraries. OpenSSL has long been indispensable in maintaining secure network communications, underpinning protocols such as SSL/TLS . Its transition to version 3.4.1 brings numerous improvements focused on performance enhancement and supporting new cryptographic algorithms. Obsolete approaches will no longer be deprecated, further strengthening system security while adhering to modern cryptographic standards. GnuTLS, another core library that provides cryptographic services, has also seen significant enhancements. Version 3.8.9 of GnuTLS includes numerous bug fixes and optimizations and support for new cryptographic primitives, making this update particularly vital to applications and services utilizing it for secure communication purposes. What does this mean for Linux security administrators? Proactive testing should ensure existing applications and services continue functioning securely while taking advantage of enhanced protections offered by new libraries. Compatibility issues could occur if any system or applications depend on deprecated algorithms or older cryptographic techniques. Testing also allows security administrators to upgrade older security implementations to fully take advantage of new libraries' enhanced features and protections. Our Final Thoughts: Staying Ahead with Plucky Puffin Ubuntu 25.04, Plucky Puffin, signifies a substantial stride towards modernizing and securing Linux systems . These updates may be challenging, but offer a more reliable, secure, and efficient system management pathway. Linux security admins must proactively embrace these changes, updating practices, workflows, and configurations. As always, the mantra is to stay ahead and anticipate shifts, ensuring systems remain at the forefront of security and performance. By engaging with these changes now, administrators safeguard their environments and align with best practices that will shape the future of Linux system management. Plucky Puffin hasopened the door—now it’s time to step through and leverage the robust security enhancements awaiting within Ubuntu 25.04. What are you most excited about in Ubuntu 25.04? Let us know @lnxsec! . Ubuntu 25.04 brings significant upgrades in time synchronization, systemd enhancements, and stronger cryptographic protocols, enhancing security and performance.. Ubuntu security, SystemD management, cryptographic libraries, NTP security, time synchronization. . Brittany Day
Apr 09, 2025
•
Vendors/Products
79
security advisorysystem upgradedevelopment toolsAlmaLinux: 9.5 release highlights performance and security upgrades
Upgrading and maintaining your operating system is crucial to optimal performance and security. AlmaLinux, a widely used open-source Linux distribution, recently released version 9.5 with new features and security enhancements that will benefit any admin or organization running . In this article, I'll explain what's new in AlmaLinux 9.5 and the improvements and features you'll benefit from by upgrading. No matter your skill set or background, I'll guide you through acquiring AlmaLinux 9.5. From backing up data to installing plugins and verifying a successful upgrade, we cover every detail to ensure your system reaps all its advantages and robustness. Introduction to AlmaLinux AlmaLinux is an open-source and community-driven Linux distribution, often seen as an alternative to CentOS since the latter transitioned to CentOS Stream. AlmaLinux OS Foundation has become a vibrant community committed to creating an enterprise-grade operating system compatible with Red Hat Enterprise Linux (RHEL) that is free, stable, and easy to use —the way CentOS was before switching over. AlmaLinux stands out among Linux options as an operating system suitable for developers, administrators, and enterprise environments due to its stability, reliability, and broad architecture support. Over the years, it has established an impressive user base due to its commitment to staying compatible with RHEL, providing seamless migration paths, regular security updates, and new features. AlmaLinux 9.5 "Teal Serval" Released AlmaLinux OS Foundation officially unveiled AlmaLinux 9.5 (Teal Serval) on November 18th, 2024. This stable release includes updates, security upgrades, new packages, and improved features that further establish AlmaLinux as a prominent enterprise Linux distribution. AlmaLinux 9.5 supports multiple hardware architectures, including Intel/AMD (x86_64), ARM64 (aarch64), IBM PowerPC (ppc64le), and IBM Z (s390x) with installation ISOs readily available for download on official mirrors as well astorrent options to assist. AlmaLinux 9.5 offers more than just traditional installation ISOs. It offers Cloud, Container, and Live Images that meet different deployment needs. These include container images featuring Universal Base Images (UBIs), LXC/LXD containers, and live media tailored for desktop environments like GNOME, GNOME-mini, KDE, XFCE, and MATE. Also, cloud images for popular cloud providers such as AWS, Azure, Google Cloud Platform, OpenNebula, and Oracle Cloud Infrastructure and generic cloud-init images are readily available. Vagrant Boxes are available for multiple virtualization platforms such as Libvirt, VirtualBox, Hyper-V, VMware (both x86_64 and AArch64), Parallels (AArch64), as well as Raspberry Pi and Windows Subsystem for Linux (both x86_64 and AArch64). With such options, AlmaLinux 9.5 can quickly and efficiently meet user requirements across various environments. AlmaLinux 9.5 Brings Key Features and Improvements AlmaLinux 9.5 introduces key updates and improvements to boost system performance and improve development tooling and security. This release emphasizes performance enhancements through upgraded system performance monitoring tools, such as visualization tools and data collection frameworks, which collectively optimize system efficiency and responsiveness. Furthermore, administrators and developers will gain deeper insights into system behavior for more effective overall performance management. AlmaLinux 9.5 provides developers with powerful development tooling to accommodate modern application development. This release features updated module streams that better accommodate web apps and other contemporary workloads. Additionally, newer compiler versions provide access to features, optimizations, and improvements for code generation. Such robust development tooling makes AlmaLinux an excellent platform for building high-performance applications. AlmaLinux 9.5 remains committed to keeping your data protected with updates designed to strengthen system protection.These improvements include strengthened cryptographic standards that increase data protection, enhanced SELinux policies that tighten access controls to minimize unauthorized access, and strengthened crypto-policies with enhanced encryption mechanisms against emerging threats - making AlmaLinux 9.5 an exemplary choice for enterprise environments that prioritize compliance and data protection. How To Download or Upgrade to AlmaLinux 9.5 on Your Systems To acquire or upgrade to AlmaLinux 9.5, users should begin by accessing one of the official AlmaLinux mirrors and downloading from there. These mirrors offer access to ISO files for various architectures and torrent links, ensuring a faster and more reliable download experience. If you upgrade from an earlier version of AlmaLinux and wish to transition smoothly to version 9.5, this process can be accomplished easily by taking several steps. First and foremost, it is vitally important that any critical data and configurations be backed up before beginning . Doing this could safeguard against data loss should any issues arise during the upgrade. After ensuring your data is safe, update all current packages to their latest versions by running sudo dnf update -y . Next, install the dnf-plugin-system-upgrade with sudo dnf install dnf-plugin-system-upgrade , as this plugin is necessary for upgrading. After installing the plugin, download AlmaLinux 9.5 packages using sudo dnf system-upgrade download --releasever=9.5 to complete your upgrade process. Once the download has been completed, initiate the upgrade process by running sudo dnf system-upgrade reboot to upgrade. Once rebooted, the upgrade process will commence. Depending on the complexity and number of upgraded packages, this may take time. To verify that the upgrade went as smoothly as planned, administrators can check whether their system runs AlmaLinux 9.5 by running cat /etc/os-release and verifying its output reads VERSION="9.5 (Teal Serval) . By taking these steps, administrators canupgrade seamlessly to AlmaLinux 9.5 so their systems can take full advantage of all its improvements and security enhancements. Our Final Thoughts on the AlmaLinux 9.5 Release AlmaLinux 9.5 "Teal Serval" represents an essential step forward for the AlmaLinux community, offering critical updates, performance upgrades, and security enhancements that benefit users new to AlmaLinux and upgrading from earlier versions. AlmaLinux provides a stable, reliable, secure platform that meets enterprise needs—be they architecture-specific support or engaging the community directly—providing users and administrators with the tools they require for IT infrastructure management purposes. Have you tested out Teal Serval? What is your impression of this release? Connect with us @lnxsec and let us know! . AlmaLinux 9.5 introduces key enhancements in performance and security, featuring speed boosts, refined kernel updates, and improved monitoring tools for SysAdmins. AlmaLinux 9.5 features, AlmaLinux upgrade, Linux performance improvements, open source updates, AlmaLinux security enhancements. . Brittany Day
Nov 20, 2024
•
Security Projects
81
security advisorycryptographyanonymityTails 6.4 Security Advisory: Enhanced Privacy and Cryptographic Features
As digital privacy and security evolves, anonymity cannot be overemphasized. Tails is a live operating system designed to keep its focus on privacy and anonymity. Its unique focus allows you to boot it on almost any computer using a USB stick or DVD drive and use state-of-the-art cryptographic tools for protecting files, emails, and instant messaging conversations without leaving a trace behind on your machine. With its focus on anonymity and its use of state-of-the-art cryptographic tools to encrypt files and instant messaging conversations from being kept under lock and key. TAILS (an acronym for The Amnesic Incognito Live System) leverages the Tor network to protect online privacy and evade censorship. Each Tails session acts like a clean slate when shutting down; no data remains from session to session unless saved into an encrypted Persistent Storage space. New Features in Tails 6.4 Tails version 6.4 brings many notable updates that will appeal to Linux administrators and privacy-minded users alike. Cryptography Strength Reinforced with Random Seed One of the key enhancements for Tails is including a random seed on USB flash drives as part of our cryptographic strength enhancement. This feature is invaluable in strengthening cryptography across our system—such as Tor, HTTPS connections, and the Persistent Storage feature—by strengthening cryptography across them. By keeping this random seed outside Persistent Storage itself, all users benefit from increased cryptographic protections regardless of configuration differences. Tails 6.4 Switches to HTTPS over Onion Services for APT Repositories In an unconventional move from past versions, Tails 6.4 has transitioned away from using onion services for Debian and Tails APT repositories in favor of HTTPS addresses to improve reliability for the Additional Software feature and streamline software management for users. Software Updates and Bug Fixes One compelling factor in adopting Tails 6.4 is its current software stack andarray of fixed problems. Tails 6.4 offers an updated Tor Browser (13.0.16) and Tor client (0.4.8.12) to give users access to the latest developments in secure browsing; email communication has also been improved thanks to an upgraded Thunderbird (115.12.0). Numerous bugs have been addressed to enhance user experience significantly. Problem resolution includes fixing and unlocking Persistent Storage issues, connecting to mobile broadband networks on particular hardware, and reenabling Thunderbird's previously disabled PDF reader due to security. Furthermore, user experience refinements such as more informative error messages in Tails Cloner and smooth interactions when using the Unlock VeraCrypt Volumes utility demonstrate developers' attentiveness towards user feedback. Upgrading and New Installations For existing users, upgrading to Tails 6.4 should be straightforward, with automatic upgrades from as early as version 6.0 being available for automatic upgrading. Newcomers or those wishing for manual upgrades can follow detailed installation instructions provided by the Tails project, which are explicitly tailored for various platforms. Why Linux Administrators Should Take Note Linux administrators who prioritize security and seek to safeguard their systems against surveillance and censorship will find Tails 6.4 indispensable. With its enhanced cryptographic measures, commitment to updating core components like the Tor Browser and client, and quick bug resolution, Tails exudes an environment designed specifically to secure its systems. Administrators will appreciate Tor's operational transparency--all network traffic is automatically routed through it, eliminating risks related to network surveillance. Furthermore, its persistent storage feature enables safekeeping of essential files, configurations and software across sessions without jeopardizing its security posture. Alternatives to Tails for Privacy and Security Tails stands out for its anonymity and security features, but it isn'talone in this respect. Linux distributions such as Whonix and Qubes OS also provide similar functionality; Whonix operates by isolating user internet connections within an isolated virtual machine that routes all traffic via Tor. Meanwhile, Qubes takes an alternative approach by compartmentalizing various aspects of its OS into isolated VMs to prevent malware from crossing boundaries. Open Source choices ftw! Learn More about Tails and Privacy Tails 6.4 is evidence of this project's ongoing dedication to privacy, security, and user experience. With every update, Tails equips the global community with toolsets designed to increase online anonymity while guarding against surveillance intrusions. Linux administrators who place great value in security measures will find this release compelling enough to upgrade existing systems or implement this OS into their operations in an increasingly monitored digital world. Best distro for privacy and security in 2024 Which distros are most focused on privacy ? How to Encrypt Files on Linux Enhanced Privacy with Predator-OS . . Tails 6.4 boosts security and confidentiality with advanced encryption techniques, intuitive interface upgrades, and protected boot features.. Anonymity Tools, Privacy Enhancements, Cryptographic Solutions, Linux Security, Secure Browsing. . Dave Wreski
Jun 18, 2024
•
Privacy
67
cryptographycode breakingencryption challengeDecoding Simon Singh's Challenge: Ten Complex Codes to Break
This Wired story describes the recent contest created to decipher 10 increasingly difficult codes set by author Simon Singh in his international bestseller The Code Book. Quite interesting. There's also the step-by-step analysis of what the Swedish cryptographers did in their . . . . This Wired story describes the recent contest created to decipher 10 increasingly difficult codes set by author Simon Singh in his international bestseller The Code Book. Quite interesting. There's also the step-by-step analysis of what the Swedish cryptographers did in their How we Cracked the Code Book Ciphers The link for this article located at Wired/Codebook.org is no longer available. . This Wired story describes the recent contest created to decipher 10 increasingly difficult codes se. wired, story, describes, recent, contest, created, decipher, increasingly, difficult, codes. . LinuxSecurity.com Team
Nov 27, 2023
•
Cryptography
67
open sourcecryptographyexport complianceUnderstanding Export Regulations for Open Source Encryption Applications
I received a phone call today from a lady with the U.S. Bureau of Export Administration (BXA) who'd read my AEScrypt page (the URL of which I'd submitted to them for an export license exemption as required by U.S. . . . . I received a phone call today from a lady with the U.S. Bureau of Export Administration (BXA) who'd read my AEScrypt page (the URL of which I'd submitted to them for an export license exemption as required by U.S. export regulations). aescrypt is of course Open Source. She wished to remind me that any application built using Open Source encryption components had to also be submitted to the BXA for the proper export license or license exemption if the application was to be exported. The export license for the component covers only the component, not applications that use the component. The fact that the component itself is Open Source and thus may be freely exported does not matter. Hopefully this reminder will prevent problems on the part of those who use AEScrypt or other Open Source encryption components as part of a larger application. -Eric The link for this article located at LinuxToday/Eric Green is no longer available. . An examination of open-source cryptographic modules and the associated export control regulations, including an analysis of adherence to legal standards.. Open Source Encryption,AEScrypt Compliance,Export Licensing,Encryption Technology. . LinuxSecurity.com Team
Oct 10, 2023
•
Cryptography
81
securitycryptographyprivacyGoogle Adds WireGuard VPN Protocol to Android 12's Linux Kernel
Google has added support for Wireguard - a VPN that uses state-of-the-art cryptography to provide users with the highest level of privacy, security and speed - to Android 12's Linux Kernel 5.4 tree. . The release of WireGuard earlier this year was one of the biggest things to happen to the VPN industry in a long time and now Google has added support for the new protocol to the next version of Android. WireGuard, which was created by Edge Security's Jason A. Donenfeld, uses state-of-the-art cryptography to provide users with the highest level of privacy, security and speed. The new protocol is faster than existing VPN protocols and it also only contains just 4,000 lines of code compared to OpenVPN's 100,000 lines of code, making it easier to review and audit. Just after the release of version 1.0.0 of the protocol back in March, it was added to the Linux kernel and made available in Linux 5.6 by Linus Torvalds. As Android is also based on Linux, it makes sense that Google would want to bring native WireGuard support to its mobile operating system by adding it to Android 12's Linux Kernel 5.4 tree. . The launch of OpenVPN last quarter has revolutionized online privacy by providing superior encryption and performance.. WireGuard VPN, Android 12, Linux Kernel, Privacy Protocols. . LinuxSecurity.com Team
Oct 16, 2020
•
Privacy
67
security advisorynetwork securityintrusion preventionIPFire 2.25: Enhanced Kernel Protection Against Rootkits
Have you heard about IPFire's new method of cryptographic kernel rootkit protection? IPFire is an open-source software that protects the network from external attacks and prevents intrusion. . In the latest release of test v2.25 – Core update 142, IPFire has introduced a new method to sign the Linux kernel module cryptographically. As a result of this, the attacker cannot execute an illegal action using a deployed third-party module into the IPFire kernel. This new approach of kernel rootkit protection can completely restrict the activities of hidden rootkits on the system. Any modification to the kernel code now requires validation using a cryptographic signature to check its authenticity and integrity. The link for this article located at Fossbytes is no longer available. . The latest update to IPFire incorporates digital signatures for kernel modules, bolstering defenses against rootkits and strengthening overall Linux security.. IPFire Kernel Security, Rootkit Defense, Cryptographic Techniques, Open Source Firewalls. . LinuxSecurity.com Team
Mar 18, 2020
•
Cryptography
67
linux applicationsopen source toolskey managementKey Cryptographic Principles Every Linux User Should Know About
Kurt Seifried has written an article on the basics of cryptography, as well as some tips on how to use the various crypto applications for Linux. . . . . Kurt Seifried has written an article on the basics of cryptography, as well as some tips on how to use the various crypto applications for Linux. The link for this article located at SecurityPortal is no longer available. . Kurt Seifried explores cryptography essentials, focusing on key concepts for Linux users, including encryption, hashing, key management, and open-source tools. Cryptography Essentials, Linux Encryption, Open-Source Applications. . LinuxSecurity.com Team
Jan 01, 2020
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!