Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 47 articles for you...
83
command executionmalware analysisdata theftStripedFly Malware Infects Over A Million Systems: Remote Access Threat
StripedFly malware is capable of grabbing screenshots and stealing passwords. . Cybersecurity researchers have discovered an “impressive” malware threat hiding in plain sight for half a decade. Called StripedFly, the malware’s earliest evidence of activity dates back to 2017, Kaspersky claims, where at one point it was discovered but dismissed as a “mere” cryptocurrency miner. However, a new investigation has shown that StripedFly is capable of a lot more than just mining cryptocurrency: it can execute commands remotely, grab screenshots and execute shellcodes, steal passwords and other sensitive data, record sounds using the integrated microphone, move to adjacent endpoints using previously stolen credentials, abuse the EternalBlue exploit to worm into other systems, and lastly - mine Monero. . Experts in cybersecurity have revealed the remarkable functions of StripedFly malware, which can effectively harvest confidential information and perform various operations.. StripedFly Malware, Remote Access Threat, Cybersecurity Analysis, Malicious Software. . LinuxSecurity.com Team
Oct 29, 2023
•
Hacks/Cracks
83
security researchSSH accesscybersecurity threatDiscover Supershell: Open Source Botnet for SSH Access and Docker
The digital age offers opportunities but also increases the importance of cybersecurity as threats grow in complexity and sophistication, making preparedness a top priority. . Open-source botnets are now a hot topic in cybersecurity due to their accessibility and rapid adaptability against security measures. Cybersecurity researchers at SOCRadar recently reported about an open-source botnet, Supershell, that obtains SSH shell access. Supershell is an open-source botnet that offers rapid one-click Docker-based deployment with integrated reverse SSH for team collaboration and interactive control. The link for this article located at CyberSecurity News is no longer available. . Discover Supershell, a collaborative open-source botnet featuring SSH connectivity and Docker-based deployment designed for seamless team interaction.. open source botnet, SSH access, Docker deployment. . LinuxSecurity.com Team
Oct 06, 2023
•
Hacks/Cracks
83
ransomwareindustrial controlcybersecurity threatExperts Challenge Claims Made by GhostSec Regarding ICS Ransomware
SecurityWeek reports that pro-Ukraine hacktivist group GhostSec is having its claims of launching the first-ever ransomware attack against an industrial control system device questioned by cybersecurity experts. . GhostSec alleged that it was able to compromise a remote terminal unit in Belarus, a major ally of Russia, and while files were encrypted as a result of the intrusion, no ransom has been demanded. However, SynSaber noted that attacks against the targeted device, a Teleofis RTU968, which runs on the popular Linux OS OpenWrt, have been done before. "Given that these devices are running generic Linux kernels that happen to be providing connectivity to serial devices (which, of course, could be industrial), theres nothing in the evidence supplied by GhostSec that industrial was specifically attacked or that this attack represents a new paradigm shift in industrial hacking," said SynSaber Chief Technology Officer Ron Fabela. . Cyber group GhostSec reports it breached a remote terminal unit in Belarus, but specialists in industrial control systems express skepticism.. Hacktivist Group, ICS Ransomware, OpenWrt Security, Cybersecurity Threats, Remote Terminal Units. . LinuxSecurity.com Team
Jan 18, 2023
•
Hacks/Cracks
83
remote accessmalwaresecurity riskRising Malware Threats in Windows Subsystem for Linux (WSL)
The number of malware strains targeting WSL is growing. . Windows Subsystem for Linux (WSL) is becoming a breeding ground for malware , cybersecurity researchers are saying. While WSL-based malware is not particularly new (spotted as early as September 2021), it’s been rising in popularity among cybercriminals of late. Speaking to BleepingComputer, cybersecurity researchers from Lumen Technologies said they’ve managed to track more than 100 samples since then. The samples vary in complexity, as well as features on offer. While some are relatively simple, others enable threat actors to remotely access devices, run arbitrary code, steal authentication cookies from specific browsers , or download files. . The Windows Subsystem for Linux (WSL) is increasingly viewed as a potential hotspot for malicious software, prompting alarm bells to ring amongst cybersecurity professionals.. Windows Subsystem for Linux, Malware Threats, Cybersecurity Risks, Remote Access Issues. . LinuxSecurity.com Team
Jun 01, 2022
•
Hacks/Cracks
79
security frameworkopen source securitycybersecurity threatBoosting Security Against Supply Chain Attacks With Google's SLSA Framework
To tackle the growing threat of attacks on the software supply chain, Google has proposed the Supply chain Levels for Software Artifacts framework, or SLSA which is pronounced "salsa". Can Google's 'salsa' make life harder for supply chain attackers? Comment below - we want to hear what you think! . Sophisticated attackers have figured out that the software supply chain is the soft underbelly of the software industry. Beyond the game-changing SolarWinds hack, Google points to the recent Codecov supply chain attack, which stung cybersecurity firm Rapid7 via a tainted Bash uploader. While supply chain attacks aren't new, Google notes they've escalated in the past year, and has shifted the focus from exploits for known or zero-day software vulnerabilities. . Advanced threat actors are targeting the software development pipeline; Google's SLSA initiative strengthens defenses against these vulnerabilities.. Software Supply Chain, Google Security, SLSA Framework, Software Attacks, Open Source Security. . LinuxSecurity.com Team
Jun 17, 2021
•
Security Projects
82
risk managementcybersecuritysecurity insightsAddressing Software Supply Chains: Open Source Security Insights
In the wake of several major cybersecurity incidents - the most recent being the Colonial Pipeline ransomware attack, the government wants to shore up its software supply chain. There’s no silver bullet, but Open Source shows significant promise in meeting this challenge. . Recent intrusions into federal agencies and critical infrastructure are causing the government to more closely examine how software is made, in addition to who’s making it and where. Even before President Joe Biden and his transition team entered the White House amid the unfurling SolarWinds crisis, the executive branch was working to collectively reduce weaknesses in the government’s software supply chain. A new executive order gets deeper into core software development techniques than anything from previous administrations. . Recent incidents involving federal agencies underscore vulnerabilities within government software supply chains, prompting an examination of open-source threats.. Software Supply Chain, Open Source Security, Cybersecurity Threats, Software Integrity. . Brittany Day
May 19, 2021
•
Government
83
malwareLinuxcybersecurity threatTrickBot Linux: New Threats After Recent Infrastructure Shutdown
After the shut down of most of its critical infrastructure, the infamous TrickBot malware is now targeting Linux systems. . Efforts to disrupt TrickBot may have shut down most of its critical infrastructure, but the operators behind the notorious malware aren't sitting idle. According to new findings shared by cybersecurity firm Netscout , TrickBot's authors have moved portions of their code to Linux in an attempt to widen the scope of victims that could be targeted. TrickBot, a financial Trojan first detected in 2016, has been traditionally a Windows-based crimeware solution, employing different modules to perform a wide range of malicious activities on target networks, including credential theft and perpetrate ransomware attacks. . Reports indicate key components have been adapted and relocated to sustain operational capabilities, with TrickBot's operators likely to innovate further amid continued cyber threats. TrickBot Linux, TrickBot Malware, Cyber Threats, Financial Crimeware. . LinuxSecurity.com Team
Oct 28, 2020
•
Hacks/Cracks
83
data breachsensitive datacybersecurity threatBBC: Major Data Leak On Russian Intelligence's Tor De-Anonymization
Have you heard that hackers havestolen a massive trove of sensitive data and defaced the website of SyTech, a major contractor working for Russian intelligence agency FSB (Federal Security Service)? BBC Russia, which reported the breach, said âitâs possible that this is the largest data leak in the history of the work of Russian special services on the Internet.â The documents included descriptions of dozens of internal projects the company was working on, including ones on de-anonymization of users of the Tor browser and researching the vulnerability of torrents. . The link for this article located at The Next Web is no longer available. . Major security incident disclosed concerning Russian cyber operations targeting Tor anonymity mechanisms and weaknesses in torrent protocols.. Tor De-Anonymization,Russian Intelligence,Data Breach,Cybersecurity Threats. . LinuxSecurity.com Team
Jul 22, 2019
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!