Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
83
security breachdata exposurepenetration testingHacker Virus_Hima Breaches Database Backups of Yahoo! Systems
A penetration tester has reportedly hacked Yahoo!, claiming to have gained access to website backup and database files for a dozen databases.. The hacker using the handle Virus_Hima published screenshots that showed the purported site backups for a Yahoo! finance subdomain. The link for this article located at SC MagazIne is no longer available. . The hacker using the handle Virus_Hima published screenshots that showed the purported site backups . penetration, tester, reportedly, hacked, yahoo, claiming, gained, website, backup. . LinuxSecurity.com Team
Dec 17, 2012
•
Hacks/Cracks
83
security advisorysoftware updateMySQLMySQL: 5.1.63, 5.5.25 Critical Authentication Bypass Threat
Security researchers have released details about a vulnerability in the MySQL server that could allow potential attackers to access MySQL databases without inputting proper authentication credentials. . The vulnerability is identified as CVE-2012-2122 and was addressed in MySQL 5.1.63 and 5.5.25 in May. However, many server administrators might not be aware of its impact, because the changelog for those versions contained very little information about the security bug. The link for this article located at Computer World is no longer available. . The vulnerability is identified as CVE-2012-2122 and was addressed in MySQL 5.1.63 and 5.5.25 in May. security, researchers, released, details, about, vulnerability, mysql, server. . LinuxSecurity.com Team
Jun 12, 2012
•
Hacks/Cracks
83
security advisoryMySQLSQL injectionMySQL Advisory: Blind SQL Injection Threat to Database Access
On a security mailing list over the weekend, an unknown party published details about the structure and content of databases on the website of database vendor MySQL. The information was apparently accessible via a security hole on the MySQL.com website.. The hacker says the vulnerability is a blind SQL injection problem. This is a worst case scenario for a web server because the flaw allows access to the entire database behind a public-facing website. SQL injections are possible when SQL commands can be embedded in user input so that Web servers pass them on to the database. Blind SQL injection means that the result of the database operation is not displayed; in other words, the attacker has to work blindly. In such cases, hackers therefore often ask the database yes/no questions and link one of the answers to a time-consuming operation. Depending on how long it takes the resulting page to appear, they can then tell what the response to the query was. The link for this article located at H Security is no longer available. . A major vulnerability permits invisible SQL injection intrusions on PostgreSQL, granting full control over the database.. MySQL Hacking, SQL Injection Attacks, Database Exposure, Cybersecurity Risks. . LinuxSecurity.com Team
Mar 28, 2011
•
Hacks/Cracks
83
data protectionaccess controluser permissionsStrategies for Managing Privileged User Access in Databases
The prospect of restricting access to your database is tricky when it comes to privileged users, such as database administrators who need to keep the databases running, developers who need to tap into databases to get them to work, or super users who just need an inordinate amount of access to get their jobs done.. Privileged users are in a class of their own when it comes to database activity. Plain and simple, their extended access poses a much higher risk exposure to the data: These users touch, move, and manipulate more data than the average user. So chances are higher that they'll make a mistake that compromises data, or will operate maliciously and undetected. Some form of database activity monitoring is a key part of that system. But even more impactful -- and perhaps more immediate for less mature organizations -- is the often forgotten first step of employing the rule of least privilege. Do your privileged users really need the database permissions they currently have, and is their level of access appropriate? The link for this article located at Dark Reading is no longer available. . Navigating database access can be challenging when dealing with authorized personnel. Discover strategies for governing access rights while safeguarding sensitive information.. Database Access, User Permissions, Data Protection, Access Control. . LinuxSecurity.com Team
Nov 16, 2009
•
Hacks/Cracks
83
sql injectioncyber attackmalware exploitBarackObama.com Database Compromised: SQL Injection Attack Overview
We're reported in the past on hacks of the President's campaign web site barackobama.com, still used for political campaigning: This one on January 26, 2009 served malware to users and this one from April 21, 2008 redirected users to the Hillary Clinton campaign site (note: Friends of Hillary is still taking contributions).. The latest attack uses SQL injection to gain full access to the databases on the barackobama.com server. They use Microsoft Access databases, including the one in the graphic (click it for a full-size image): It's the database of administrators and their passwords, all in plain text. By adding themselves to the database they get to log in as administrator and do whatever they want. The link for this article located at PC Magazine is no longer available. . The latest attack uses SQL injection to gain full access to the databases on the barackobama.com ser. we're, reported, hacks, president's, campaign, barackobama, still. . LinuxSecurity.com Team
Oct 27, 2009
•
Hacks/Cracks
77
MySQLaccess controlsecurity best practicesUnderstanding MySQL Access Control and Security Best Practices
Over the next few pages, I'm going to examine the mySQL access control system, and throw some light on the mySQL "grant tables". These tables, which are an integral part of the server's security system, offer database administrators a great deal . . . . Over the next few pages, I'm going to examine the mySQL access control system, and throw some light on the mySQL "grant tables". These tables, which are an integral part of the server's security system, offer database administrators a great deal of power and flexibility in deciding the rules which govern access to the system. I'll be assuming that you know the basics of SQL, and have a mySQL database server up and running. If you're not familiar with SQL, you can find a tutorial at https://devshed.com The link for this article located at devshed is no longer available. . Delve into the MySQL privilege management structure and the associated grant tables to gain a deeper understanding of database security mechanisms.. MySQL Security, Database Access Control, Grant Tables, Best Practices, Admin Insights. . LinuxSecurity.com Team
Apr 26, 2001
•
Server Security
81
data privacyprivacy concernscustomer informationNetwork Solutions Domain Sale Triggers Backlash Over Privacy Issues
The Internet's phone book is up for sale - and though the listings may represent a treasure trove for marketers, the move also risks a serious privacy backlash. At issue are millions of entries in the domain-name database operated by the . . . . The Internet's phone book is up for sale - and though the listings may represent a treasure trove for marketers, the move also risks a serious privacy backlash. At issue are millions of entries in the domain-name database operated by the Network Solutions unit of VeriSign Inc., Mountain View, Calif. It is, essentially, the master address book for the Internet. Since the dawn of commerce on the Web, companies that want their own dot-com addresses have registered with Network Solutions. Now Network Solutions is selling that information. "On your mark, get set, go!" gushes a recent advertisement in a newsletter for direct marketers. "Available for the first time ever. Approximately 6 million unique customers, sliced and diced for you to target prospects, learn about a specific audience or retain customers ... Take this information and run with it." . The digital realm's website address registry is available for purchase, posing a threat to personal privacy while offering enormous advertising opportunities.. Domain Sale, Privacy Risks, Consumer Data, Internet Marketing. . LinuxSecurity.com Team
Feb 16, 2001
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!