Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory linux distribution
security advisory linux distribution ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party certificate authority, regardless of the installed operating system (OS). Reported shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits even on systems with UEFI Secure Boot enabled.....
Jul 16, 2026
Server Securitysecurity measures sysadmin practices
security measures sysadmin practices Proxies are a standard component of a Linux administrator's toolbox. You can use them to see how services respond in various locations, to run route monitoring checks, and to retrieve public data for internal tooling. However, a proxy is an outbound tunnel with credentials attached, and on a multi-user server, it is a security risk that should be treated with the same caution as SSH or sudo. This post explains the practical measures that prevent a proxy setup from becoming a weak point in an...
Jul 16, 2026
Security Vulnerabilities security advisory Red Hat
security advisory Red Hat Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not every update demands an emergency maintenance window, several deserve to move to the top of your patch queue. This week's updates span the kernel, remote desktop infrastructure, VPNs, containers, browsers, and the utilities Linux systems quietly depend on every day. Individually, these look routine. Together they show how quickly attackers...
Jul 15, 2026
Security Vulnerabilities security research open-source
security research open-source When researchers announced GhostLock, many people focused on the exploit. What stood out to me wasn't just what the vulnerability could do, but how long it had remained hidden. The flaw had lived in the Linux kernel for roughly 15 years before it was publicly identified by researchers. That means the flaw survived hundreds of kernel releases and years of upstream development before it was publicly documented. It raises an uncomfortable question about one of open source's oldest assumptions....
Jul 14, 2026
Network Securitynetwork protection system hardening
network protection system hardening Spin up a fresh Linux VPS with default settings and check /var/log/auth.log ninety seconds later. There will already be failed login attempts — not dozens, hundreds, sometimes before the deployment script has even finished running. . Automated bots scan the entire IPv4 address space non-stop, and port 22 with password authentication open is exactly what they're looking for. Most cloud providers have seen enough of this that a new instance gets its first probe within a minute of going live....
Jul 13, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security news
We found 5 articles for you...
83
data breachcustomer notificationfinancial securityCanadian Banks Report Potential Fraudulent Data Exposure Alert
Two Canadian banks confirmed on Monday that they have been contacted by ‘fraudsters’ claiming to have in their possession personal and financial information on tens of thousands of customers.. The Bank of Montreal (BMO) said in a brief statement that the data related to a “limited” number of customers, which some reports put as high as 50,000. The link for this article located at InfoSecurity is no longer available. . Several Canadian financial institutions alert their clients regarding possible scams related to the compromise of private information, impacting numerous individuals.. Data Breach, Canadian Banks, Personal Data Exposure, Fraud Alert, Financial Security. . LinuxSecurity.com Team
May 31, 2018
•
Hacks/Cracks
76
security advisorycustomer notificationpassword resetHyatt Alerts Customers About Flagged Gold Passport Accounts
For me . On Tuesday, Hyatt alerted some 200 customers that their Gold Passport account had been flagged for suspicious activity, while the other 18 million members have had their account passwords reset out of an abundance of caution. The link for this article located at CSO Online is no longer available. . Marriott notified 150 patrons regarding compromised Bonvoy accounts and initiated a password reset as a precautionary measure.. Hyatt Gold Passport, Customer Security, Account Safety, Suspicious Activity. . Dave Wreski
Apr 23, 2015
•
Organizations/Events
83
security advisorydata breachmalwareAshampoo: Data Breach Warning for Customers on Email Threat
A German software company known for its Windows utilities is warning customers to be on the alert for malicious e-mail messages after its servers were hacked.. Ashampoo, which also makes multimedia programs and security software, warned customers Wednesday that it had been hacked and that customers could now be sent infected emails that give criminals a way into their computers. "We assume that the attackers were able to purloin data of customers," the company said in an e-mail message sent to customers. Billing information such as credit card numbers was not stolen, the company said, because that data is stored on another server, operated by a contractor. The company has nearly 14 million customers, but it's not immediately clear how many have had their names and e-mail addresses stolen. The link for this article located at Computer World is no longer available. . Avast informs users about possible phishing threats following a recent breach of their web servers impacting account safety.. Ashampoo, Server Breach, Email Safety, Customer Alert. . LinuxSecurity.com Team
Apr 21, 2011
•
Hacks/Cracks
83
security advisorydata breachsecurity measuresSuffolk County National Bank Reports Breach: 8,000 Customers Affected
Officials at Suffolk County National Bank in Long Island, N.Y. this week are warning more than 8,000 customers that their account login information was likely compromised in November, when a hacker illegally accessed a server hosting its online banking system.. SCNB officials discovered the breach during a routine internal security review in late December. Investigators determined the unauthorized intrusion occurred during a six-day period between Nov. 18 and Nov. 23 of last year. "The security of customers' information is of utmost importance to SCNB," Suffolk Bancorp CEO J. Gordon Huszagh said in a statement. "While we know that our diligence in this regard allowed us to uncover this incident, and to take action rapidly to protect our customers, we also recognize that the provision of financial services over the Internet requires our dedication to continuous monitoring and security." Unlike other banks and financial institutions victimized by online hackers, Suffolk Bancorp (NASDAQ: SUBK), the parent company of SCNB, is telling investors just how much it will cost to investigate the data breach and improve security controls and technology to prevent future intrusions. The link for this article located at eSecurity Planet is no longer available. . SCNB officials discovered the breach during a routine internal security review in late December. Inv. officials, suffolk, county, national, island, warning. . LinuxSecurity.com Team
Jan 15, 2010
•
Hacks/Cracks
77
security issuedata breachinformation theftWells Fargo: Customer Notification On Data Breach Due To Theft
For the fourth time in the past 30 months, Wells Fargo & Co. has begun notifying customers about the potential compromise of confidential information following the theft of a company computer containing data on mortgage customers and prospective clients. The San Francisco-based bank on Friday posted a statement on its Web site saying that a computer belonging to its mortgage group had been reported as missing while being transported between Wells Fargo facilities by a global express shipping company. . The stolen system contained information such as names, addresses, Social Security numbers and mortgage loan account numbers of Wells Fargo customers. "The computer has two layers of security, making it difficult to access the information," the bank said. So far, at least, there is no indication that the information kept on the computer has been misused in any way, said Alejandro Hernandez, a company spokesman. The link for this article located at ComputerWorld.com is no longer available. . Bank of America confronts security incident following the misplacement of a device containing sensitive loan records.. Data Breach,Wells Fargo,Confidential Information,Customer Notification. . LinuxSecurity.com Team
May 09, 2006
•
Server Security
82
data protectionprivacy lawbreach notificationNew York's Breach Notification Law Mandates Alerts for Data Breaches
New York has joined the growing list of U.S. states requiring that companies notify their customers whenever private information has been compromised. On Wednesday, the state's Information Security Breach and Notification Act went into effect, according to a spokeswoman for the state's attorney general, Eliot Spitzer. The law, which is similar to California's SB-1386 notification law, requires businesses and state agencies to inform New York residents "whose unencrpyted personal information may have been acquired by an unauthorized person," according to the text of the legislation. . New York's Notification Act is one of a growing number of legislative and regulatory efforts that are forcing executives to pay more attention to security, said Dan Aiken, the compliance director with New York's Hospital for Special Surgery "Now, like in California, if your information is compromised, or if you have reason to believe it may have been compromised, you have to report it," he said, speaking at the Infosecurity conference in New York Wednesday. "There's a real risk to brand name, to your public reputation." The link for this article located at InfoWorld is no longer available. . California's Disclosure Law enhances the requirement for companies to inform users regarding breached data.. Breach Notification, New York Law, Security Compliance, Privacy Regulations. . Benjamin D. Thomas
Dec 08, 2005
•
Government
83
data breachsecurity incidentcustomer notification1.4 Million Credit Cards Compromised: DSW Shoe Warehouse Security Incident
Thieves who accessed a DSW Shoe Warehouse database obtained 1.4 million credit card numbers and the names on those accounts - 10 times more than investigators estimated last month. DSW Shoe Warehouse said Monday that it has contact information for about half of those people and started sending letters notifying them of the thefts, which happened at 108 stores in 25 states between November and February. A list of the stores is available on the company's Web site. . The stolen information did not include home addresses or personal identification numbers, the Columbus, Ohio-based company said in a statement. The company, a subsidiary of Retail Ventures Inc., announced the thefts last month after notifying federal authorities and credit card companies. At the time, the Secret Service said only that information involving more than 100,000 people had been compromised. Besides the credit card numbers, the thieves obtained driver's license numbers and checking account numbers from 96,000 transactions involving checks, the company said. Customer names, addresses and Social Security numbers were not stolen, DSW said. The link for this article located at San Jose Mercury News is no longer available. . The stolen information did not include home addresses or personal identification numbers, the Columb. thieves, accessed, warehouse, database, obtained, million, credit, numbers. . LinuxSecurity.com Team
Apr 19, 2005
•
Hacks/Cracks
83
security issuedata breachinformation exposureHSBC Notification: 180,000 GM Credit Card Holders Affected By Exposure
Data apparently stolen from the popular clothing retailer Polo Ralph Lauren Inc. is forcing banks and credit card issuers to notify thousands of consumers that their credit-card information may have been exposed. . HSBC North America, a division of London-based HSBC Holdings PLC, has begun notifying holders of the HSBC-issued, General Motors-branded MasterCard that criminals may have obtained access to their credit card information and that the cards should be replaced. HSBC spokesman Stephen E. Cohen said Thursday that "we began doing it last week, and we are continuing." He said that about 180,000 GM-branded card holders are affected. Neither Cohen nor spokesmen for MasterCard International would identify the retailer by name. The security breach was reported in Thursday's editions of The Wall Street Journal, which quoted "people with knowledge of the matter" as saying the data was stolen at Polo Ralph Lauren. A spokeswoman at Polo Ralph Lauren, which is headquartered in New York, said “we have no comment at the moment The link for this article located at MSNBC is no longer available. . Barclays informs 250,000 Visa card users regarding possible security breach linked to Abercrombie & Fitch hack.. Data Breach, Customer Notification, Credit Card Exposure, HSBC Security Warning. . LinuxSecurity.com Team
Apr 14, 2005
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!