Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 0 articles for you...
74
cyber threatmalware analysisindustrial espionageTracking Cyber Threats: Techniques From Dell's Joe Stewart
They're out there, says security researchers: the Chinese hackers attempting to break into U.S. enterprises, and jihadist terrorists that brazenly post videos of sniper killings, while stealing credit-cards to launder money for funding nefarious campaigns in Mideast or Caucasus hot spots.. It's just a matter of finding them, and Dell SecureWorks researcher Joe Stewart described at the RSA Conference this week how he caught one by laboriously collecting information related to a Chinese hacker. He's calling the incident the "Sin Digoo Affair" after the misspelling of San Diego in Internet domain registrations under the fake name of "Tawnya Grilth" that he saw over and over again, which was but one clue, including many others such as malware signatures, he followed in his quest to track down an attacker based on a case of industrial espionage and botnets. The link for this article located at PC World is no longer available. . Discover how Joe Stewart, an investigator at Dell, meticulously tracked a cybercriminal by employing systematic analysis and vital evidence, illuminating the perils of the digital world.. Internet Theft, Cybersecurity Tactics, Malware Analysis, Hacker Identification, Industrial Espionage. . Alex
Mar 02, 2012
•
Network Security
83
attack methodscybersecurity tacticsscarewareSearch Engine Manipulation Tactics Uncovered in Sophos Report
The techniques used by unloveable rogues who automate search engine manipulation attacks themed around breaking news to sling scareware have been unpicked by new research from Sophos.. A research paper published on Wednesday by Sophos researchers Fraser Howard and Onur Komili lifts the lid on the search engine optimisation techniques used by hackers to hook surfers into their scams. Attackers use automated kits to apply blackhat SEO methods The link for this article located at The Register UK is no longer available. . Explore the techniques used in search engine manipulation tactics revealed in new research by Sophos on hackers' methods.. Search Engine Manipulation,Cybersecurity Tactics,Blackhat SEO,Hackers' Methods. . LinuxSecurity.com Team
Mar 31, 2010
•
Hacks/Cracks
81
phishingonline frauddata floodingInnovative Data Flooding Against Phishing Attacks by RSA Cyota
A novel tactic to defeat phishers is being employed by Cyota staff: flooding phishing sites with fake bank details to make the real information harder to find. RSA's Cyota division is helping fight phishing attacks by giving the online fraudsters what they want — lots of user names, passwords, online banking credentials and credit card numbers. . Phishing occurs when cybercriminals set up fraudulent copies of a genuine Web site — usually of a financial institution — and try to lure customers of that organisation into visiting the site and entering their login credentials or other personal details. Unfortunately for the phishers, one of the techniques Cyota is using to help protect its banking customers is to pump such fraudulent Web sites with so many fake entries that the genuine details are harder to find, according to Naftali Bennett, senior vice president of the Consumer Solutions Division at RSA Security and co-founder of Cyota, which was acquired by the security giant late last year. The link for this article located at ZDNet UK is no longer available. . Malicious actors create fraudulent platforms to trick individuals into divulging personal information, whereas RSA combats this with tactics focused on overwhelming data streams.. phishing Prevention, online Fraud, credential Security, data Flooding, cybercrime Tactics. . LinuxSecurity.com Team
Apr 01, 2006
•
Privacy
83
attack preventionsecurity strategynetwork defenseMaximizing Network Defense Through Port Scanning Techniques
Paring down your network services isn't the only way to protect your systems against attacks: port scanning can also be an effective tool. In this month's Building Blocks of Security, Sandra Henry-Stocker shows you how to stay one step ahead of . . . . Paring down your network services isn't the only way to protect your systems against attacks: port scanning can also be an effective tool. In this month's Building Blocks of Security, Sandra Henry-Stocker shows you how to stay one step ahead of your enemy. Minimizing services is just the beginning of adopting a defensive posture, however. Numerous security experts suggest that thinking like an attacker is the only way to prepare yourself to defend your site. This month, we'll examine port scanning (sending packets to systems and gaining insight from the responses) -- which has been compared to tapping on walls to determine where beams are located -- and look at what an intruder can determine about services you're running. The link for this article located at LinuxWorld is no longer available. . Paring down your network services isn't the only way to protect your systems against attacks: port s. paring, network, services, isn't, protect, systems, against, attacks. . LinuxSecurity.com Team
Nov 20, 2000
•
Hacks/Cracks
82
national securitycybersecurity tacticscyber warfareUS Plans Cyber Warfare Tactics For Military Superiority
The US is planning to turn the internet into a battleground. Air Force Lieutenant General Michael Hayden, head of the super-secret National Security Agency (NSA), said that cyberspace had become an important strategic target. . The US is planning to turn the internet into a battleground. Air Force Lieutenant General Michael Hayden, head of the super-secret National Security Agency (NSA), said that cyberspace had become an important strategic target. The link for this article located at vnunet.com is no longer available. . The US is planning to turn the internet into a battleground. Air Force Lieutenant General Michael Ha. planning, internet, battleground, force, lieutenant, general, michael. . Anthony Pell
Oct 25, 2000
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!