Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 20 articles for you...
83
cyber warfarecyber strategyIranExploring Iran's Offensive Cyber Tactics in Response to Sanctions
The Islamic Republic of Iran commonly responds to sanctions with offensive cyber-campaigns. Since at least 2009, Iran has relied on cyber-attacks to achieve many of its policy goals.. Facing the potential of new sanctions in the aftermath of President Trump's 8 May announcement that the United States would abandon the Iran nuclear deal, retaliatory cyber-attacks against the Western world are highly likely. In advance of any immediate attack, understanding the hierarchy of Iran's hackers offers insight into how to best defend against the looming prospect of risk. The link for this article located at InfoSecurity is no longer available. . North Korea's possible cyber offensives might redefine international digital defense tactics as global pressure mounts.. Iran Cyber Campaigns, Offensive Tactics, Cyber Warfare, Cybersecurity Strategies. . LinuxSecurity.com Team
May 10, 2018
•
Hacks/Cracks
82
malwareinformation gatheringcyber warfareTrojan.Laziok Malware Targets Energy Firms And Political Entities
Two new malware campaigns have been spotted in the Middle East, according to reports released this week, one targeting energy companies and the other going after political targets in Israel and Lebanon.. Symantec researchers observed a brand-new information-gathering tool, Trojan.Laziok, this January and February, targeting primarily oil, gas and helium companies in the Middle East. The link for this article located at CSO Online is no longer available. . Kaspersky issues alert on the Xorist ransomware compromising financial institutions and government agencies in Asia.. Trojan.Laziok, Cyber Warfare, Energy Sector Threats, Malware Campaigns. . Alex
Apr 03, 2015
•
Government
83
cyber warfarehacker activismdigital protestsAnonymous Collective: Influence on Hong Kong Protests and Cyber Warfare
Reporting on the hacker collective Anonymous is always fraught. This loosely organized group has no clear leader and no clear agenda. The anarchic nature of its technological attacks make it difficult to establish a who-what-where-when-why. And, of course, hackers use nom de guerres. Heck: Even the Islamic State has a spokesman.. Yet, in attacks on Israel, Visa and, to a lesser extent, Ferguson, Mo., showed that Anonymous The link for this article located at Washington Post is no longer available. . Delving into the erratic domain of Grey Hat Hackers and their significant cyber engagements with prominent organizations.. hacker activism, cyber warfare, anonymous collective, digital protests. . LinuxSecurity.com Team
Oct 02, 2014
•
Hacks/Cracks
83
malwarelaw enforcementcyber warfareU.S. Law Enforcement's New Tactics Against Gameover Zeus Malware
Dismantling one of the world's most insidious computer viruses required complex and fast-paced tactics that will be the blueprint for U.S. law enforcement's future cyberbattles. . By the time authorities claimed victory over Gameover Zeus last week, they had reverse-engineered how the virus communicated, seized command-and-control servers overseas and engaged in cyber battle with the hackers to keep them from re-establishing contact with their fast evaporating network. The link for this article located at Bloomberg BusinessWeek is no longer available. . Government officials developed innovative strategies to disrupt the Emotet malware, establishing a benchmark for upcoming digital confrontations.. Gameover Zeus,Cyber War Tactics,Malware Defense,Law Enforcement Strategies. . LinuxSecurity.com Team
Jun 12, 2014
•
Hacks/Cracks
82
government surveillancenetwork infrastructurecyber warfareExploring The NSA QUANTUM Program And Its Internet Manipulation Tactics
The internet backbone . According to revelations about the QUANTUM program, the NSA can The link for this article located at Wired is no longer available. . According to revelations about the QUANTUM program, the NSA can The link for this article located at. internet, backbone, according, revelations, about, quantum, program. . Alex
Nov 29, 2013
•
Government
83
system securityindustrial controlcyber warfareStuxnet Analysis: Complex Attack Routines on Industrial Control Systems
Ralph Langer has written the definitive analysis of Stuxnet: short, popular version, and long, technical version. Stuxnet is not really one weapon, but two. The vast majority of the attention has been paid to Stuxnet's smaller and simpler attack routine -- the one that changes the speeds of the rotors in a centrifuge, which is used to enrich uranium. . But the second and "forgotten" routine is about an order of magnitude more complex and stealthy. It qualifies as a nightmare for those who understand industrial control system security. And strangely, this more sophisticated attack came first. The simpler, more familiar routine followed only years later -- and was discovered in comparatively short order. The link for this article located at Schneier on Security is no longer available. . But the second and 'forgotten' routine is about an order of magnitude more complex and stealthy. It . ralph, langer, written, definitive, analysis, stuxnet, short, popular, version, techn. . LinuxSecurity.com Team
Nov 29, 2013
•
Hacks/Cracks
76
cyber warfareoffensive securityhacker conferenceExpert Meeting for Offensive Security Hackers Taking Place in Miami
No nametags. No photographs. No video. Attendees remain utterly anonymous -- and that. Formidable American offensive security hackers are meeting in Miami with other top hackers from all over the world to hone their technical expertise, swap war stories The link for this article located at Fox News is no longer available. . Influential cybersecurity experts from the United States convene in Miami alongside top-tier international hackers to exchange cutting-edge methodologies.. Offensive Security, Hacker Conference, Technical Exchange, Cyber Warfare, Networking Event. . Dave Wreski
Apr 15, 2013
•
Organizations/Events
76
threat analysismalwarecyber warfareIranian Programmer's Cyber Warfare Insights On Stuxnet and Security
A major topic sure to be discussed at RSA Conference 2011 next week is cyber warfare -- specifically, whether or not we're really in the middle of one. Fueling the debate is Stuxnet, a piece of malware widely believed to be the creation of Israel and-or the U.S., designed to attack Iranian nuclear facilities.. Whatever the truth about Stuxnet may be, one researcher wants the world to know Iran is working on cyber weaponry of its own. He knows, because the Iranian government had him working on it before he fled to another country. He first contacted me in October about his story. I was eager to interview him, but I had to wait for my questions to be answered. He was still getting his residency status squared away in the country he had fled to, and didn't want to jeopardize the proceedings. A week ago, he decided that process was at a point where he could share his story, but requested I keep his name and current country anonymous because of obvious safety concerns. Since October, we've had numerous conversations via Facebook, e-mail and IM. I asked if he would answer some questions if I e-mailed them. He agreed. The link for this article located at CSO Online is no longer available. . A previous coder has disclosed Iran's advancements in cyber armaments, raising alarms about potential hazards.. Cyber Warfare, Threat Analysis, Iranian Cyber Security, Stuxnet, Malware. . Anthony Pell
Feb 08, 2011
•
Organizations/Events
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!