Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
82
federal agenciescybersecurity challengespolicy changesUS Government Cybersecurity Struggles Amid White House Role Reductions
Amid a report today that the Trump White House plans to cut the administration's cybersecurity coordinator position altogether, new data shows how US federal government agencies continue to struggle to close security holes in their software.. Politico reported that the administration has eliminated the White House cybersecurity position, which was recently vacated by former head Rob Joyce, who has returned to the National Security Agency. Politico said it had obtained an email to the White House National Security Council staff from John Bolton aide Christine Samuelian: "The role of cyber coordinator will end," in an effort to "streamline authority" in the NSC, which includes two senior cybersecurity directors, she said in the email, according to Politico. The link for this article located at DarkReading is no longer available. . Politico reported that the administration has eliminated the White House cybersecurity position, whi. report, today, trump, white, house, plans, administration's, cybersecurity, coord. . Brittany Day
May 16, 2018
•
Government
81
email protectionemail filteringspam detectionExploring Anti-Spam Techniques: Challenges in Cybersecurity
In this article will we first look at some of the existing methods to identify an email as a spam? We look at the pros and cons of the existing methods and what are the current challenges in this domain. This article also needs a special mention to Paul Graham, for his wok in this field and putting up perhaps the most comprehensive tutorials in this domain on his homepage. I am sure that each one of us has faced this problem of spamming. Every morning when I open my inbox I spend most of the time either deleting the junk emails or reporting them as spam. . The link for this article located at Infosec Writers is no longer available. . The link for this article located at Infosec Writers is no longer available. . article, first, existing, methods, identify, email. . LinuxSecurity.com Team
Jun 28, 2006
•
Privacy
82
cybersecurity challengesinformation technologyintelligence agencyCIA Cybersecurity Excessive Measures Limit Analyst Performance
While other government agencies struggle with their cyber security practices, the Central Intelligence Agency apparently suffers from the opposite problem: too much security -- according to a recent study of the agency's use of information technology. . .. While other government agencies struggle with their cyber security practices, the Central Intelligence Agency apparently suffers from the opposite problem: too much security -- according to a recent study of the agency's use of information technology . In an unclassified report titled "Failing to Keep Up With the Information Revolution," former CIA officer Bruce Berkowitz -- now a research fellow at Stanford University's Hoover Institution -- found that the agency's intelligence analysts were hobbled by outdated software and cut off from many of the technological advances that workers outside the intelligence community take for granted. Agency e-mail systems are clumsy, and the CIA's search engine is so "primitive" that analysts maintain informal networks of personal contacts within the agency just to track down the information they need to do their job. "A good analyst either knows someone, or 'knows someone who knows someone,' at another office or organization who can get the information they need," wrote Berkowitz. The link for this article located at SecurityFocus is no longer available. . While other government agencies struggle with their cyber security practices, the Central Intelligen. while, other, government, agencies, struggle, their, cyber, security, practices, central. . Anthony Pell
May 29, 2003
•
Government
82
cybersecurity leadershipinformation assurancecybersecurity challengesRichard Clarke's Leadership on U.S. Cybersecurity Issues
Pearl Harbor is used as a touchstone of cataclysmic events for a reason. Not only did it have entail enormous loss, damages and casualties, it also serves as a crucial moment in history. If one looks at December 7, 1941 or . . . . Pearl Harbor is used as a touchstone of cataclysmic events for a reason. Not only did it have entail enormous loss, damages and casualties, it also serves as a crucial moment in history. If one looks at December 7, 1941 or September 11, 2001, it is clear that a digital event of the same magnitude would be major socio-political event. If such an event occurred, we wouldn't need a government mouthpiece to tell us about it. Even with the seemingly endless litany of Windows-based worms and viruses plaguing the Internet, nothing has come close to that level of electronic decimation, although Clarke claims is happening on a daily basis. Clarke's use of the term "Digital Pearl Harbor" is purely sensationalist rhetoric. Using it as flippantly and regularly as he does is not only inaccurate, it is also irresponsible and negligent. In the effort to protect homes and business against the perceived threats of cyber-terrorism, White House Cyber-Security Czar, Richard Clarke is engaging in a series of meetings with security industry representatives to discuss the nature of information security, particularly after September 11. Unfortunately, when watching these presentations and testimonies, one starts to wonder how well Clarke truly understands the reality of the world's cyber-security situation - which is a frightening prospect given that he's the top cyber-cop in the nation and has President Bush's ear on the subject. The link for this article located at SecurityFocus is no longer available. . Analyzes the impact of Richard Clarke's role in tackling national cybersecurity challenges following the events of September 11, 2001.. Richard Clarke, Cybersecurity Leadership, National Security, Information Assurance. . Anthony Pell
Jul 11, 2002
•
Government
83
network threatsattack preventioncybersecurity challengesExploring Cybersecurity Through the Eyes of Hackers and Their Tactics
Like the proverbial Dutch boy with his finger in the dyke to prevent the flood, the guardians of Internet security are vastly unprepared to meet the challenges of defaced Web sites, network intrusions and email viruses, according to one of the . . . . Like the proverbial Dutch boy with his finger in the dyke to prevent the flood, the guardians of Internet security are vastly unprepared to meet the challenges of defaced Web sites, network intrusions and email viruses, according to one of the country's most notorious hackers. The best the security industry has been able to do, says Robert Lyttle, aka Pimpshiz, is play catch up after the fact. Instead, he said, experts should take the time to develop a rapport and understanding of the very community that spawns these attacks: hackers. The link for this article located at Internet.com is no longer available. . Like the proverbial Dutch boy with his finger in the dyke to prevent the flood, the guardians of Int. proverbial, dutch, finger, prevent, flood, guardians. . LinuxSecurity.com Team
Jan 31, 2002
•
Hacks/Cracks
83
cyber threatsIT securityhacking historyHacker Tracking Journey at MIT in 1989: Steven Lynch's Story
Steven Lynch was first introduced to the joys of hunting down hackers in MIT in 1989. While working in the University's IT department he came across Australia's very own Leftist and Urvile, as they took control of the institutions servers and used them to poke holes in systems on the other side of the world.. . .. Steven Lynch was first introduced to the joys of hunting down hackers in MIT in 1989. While working in the University's IT department he came across Australia's very own Leftist and Urvile, as they took control of the institutions servers and used them to poke holes in systems on the other side of the world. Phoenix and Electron were eventually tracked down to a flat in Melbourne, but not before Lynch spent countless hours following their clandestine progress through unsuspecting networks. "We became aware they were using machines in the IT department to hack into machines in the US," Lynch said. "They were setting up back doors in the computers they hacked so they could get back in again later." Lynch can't recall what alerted the university's IT department to the suspicious goings on within the university network. Nonetheless when asked by the police to keep an eye on the character's movements, he first had to figure out how to monitor their progress without giving the game away. The link for this article located at ZDNet AU is no longer available. . Steven Lynch was first introduced to the joys of hunting down hackers in MIT in 1989. While working . steven, lynch, first, introduced, hunting, hackers, while, working. . LinuxSecurity.com Team
Oct 30, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!