Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
209
security practicescybersecurityopensslEvolving OpenSSL Threats: Defense Strategies After Heartbleed
In 2014, the cybersecurity community witnessed a critical OpenSSL vulnerability, “ Heartbleed ,” which changed how the world perceived digital security. It is considered to be among the most serious flaws in internet history. Heartbleed not only exposed the weaknesses in popular cryptographic protocols but also the potential repercussions of a small coding error. . Following the Heartbleed event, the cybersecurity landscape experienced a dramatic change as the emphasis shifted to fortifying security protocols and resolving the root causes of vulnerabilities. Several upgrades, improved code standards, stringent security audits, and a dedication to addressing identified vulnerabilities were the outcomes of this momentum. However, as with any constantly evolving technology, vulnerabilities continued to emerge in OpenSSL despite these efforts. The post-Heartbleed vulnerabilities remind us that security is an ongoing process, and we must remain vigilant, ensuring that security practices align with the latest security recommendations. The link for this article located at Security Boulevard is no longer available. . Following the Equifax breach, the landscape of digital security shifted dramatically, highlighting the critical need for persistent awareness.. OpenSSL Threats,Cybersecurity Trends,Code Vulnerabilities,Protocol Security. . Brittany Day
Nov 17, 2023
•
Security Trends
82
threatmalwaregovernmentAPT36 Threatens Indian Government Agencies with Custom Malware
APT36 is a highly sophisticated APT (Advanced Persistent Threat) group known for conducting targeted espionage in South Asia and is strongly linked to Pakistan. . While this APT group is known for targeting the following Indian sectors: Government Defense Education Since 2013, this APT group has been active, and to conduct cyber espionage, it uses the following methods:- Credential harvesting Malware distribution Here below, we have mentioned the resources used by APT36:- Custom-built remote administration tools targeting Windows Lightweight Python-compiled cyber espionage tools serving specific purposes targeting Windows and Linux Weaponized open-source C2 frameworks like Mythic Trojanized installers of Indian government applications like KAVACH multi-factor authentication Trojanized Android apps Credential phishing sites targeting Indian government officials Zscaler analysts dubbed the Windows backdoor used by APT36 ‘ElizaRAT,’ because of unique strings in observed C2 commands. The link for this article located at CyberSecurity News is no longer available. . APT36 utilizes tailored malicious software targeting Indian governmental divisions such as education and defense, representing significant risks.. APT36,CyberEspionage,GovernmentMalware,EducationSecurity,DefenseAttacks. . Brittany Day
Sep 16, 2023
•
Government
76
security advisorythreatexploitationNokia Android NFC Exploits: Security Issues And Mitigations
A new technology being added to smartphones running the Google Android and Linux-based MeeGo operating systems makes it trivial for hackers to electronically hijack handsets that are in close proximity, a researcher appearing at the Black Hat security conference said.. By exploiting multiple security weakness in the industry standard known as Near Field Communication, smartphone hacker Charlie Miller can take control of handsets made by Samsung and Nokia. The attack works by putting the phone a few centimeters away from a quarter-sized chip, or touching it to another NFC-enabled phone. Code on the attacker-controlled chip or handset is beamed to the target phone over the air, then opens malicious files or webpages that exploit known vulnerabilities in a document reader or browser, or in some cases in the operating system itself.. Leveraging flaws in NFC technology may result in unauthorized access to mobile devices. Discover methods to address and reduce these security risks.. NFC Security, Smartphone Hack, Android Threats. . Dave Wreski
Jul 25, 2012
•
Organizations/Events
79
security advisoryapacheopen sourceApache Server Defense Against DDoS Attacks: Apache Killer Threat
Apache, the open-source Web server, is the most popular Web server on the planet. It's also as safe as safe can be. Well, usually it is. An old, unfixed security hole has come back to haunt the Apache webmasters in the form of a Distributed Denial of Service (DDoS) attack tool: Apache Killer. . You may have already heard about this, and ignored it. I mean, in a world where every day brings a new security hole announcement but the Web keeps working anyway, many people have taken to a "Who cares" attitude. That's usually a mistake. And, when it comes to Apache Killer, it could be a business-killing mistake. The link for this article located at svjn / HP is no longer available. . Uncover strategies to shield your web server from Apache Killer's DDoS onslaughts and enhance your cybersecurity measures.. Apache Server, DDoS Attack, Open Source Security, Web Defense, Cybersecurity Tips. . LinuxSecurity.com Team
Aug 29, 2011
•
Security Projects
79
open-sourcelinuxdistributionU.S. Department of Defense Introduces Lightweight Secure Linux Distro
The U.S. Department of Defense and the Air Force Research Laboratory have decided to respond and offer up a way to use a PC securely by developing a new lightweight and secure Linux distribution.. It The link for this article located at Geek.com is no longer available. . Explore a new minimalistic Linux distribution developed by the U.S. Department of Defense tailored for safe computing environments.. Lightweight Linux Distribution, Secure Computing Solutions, U.S. Department of Defense. . LinuxSecurity.com Team
Jul 22, 2011
•
Security Projects
82
cyber attackcyber threatsecurity warningGates Issues Warning: Huge Cyber Threats To U.S. Infrastructure
Officials from the Departments of Defense (DoD) and Homeland Security (DHS) this week warned that the prospect of a cyber attack remains imminent even as their agencies continue to monitor threats to U.S. critical infrastructure. . Speaking at The Wall Street Journal's CEO Council, Secretary of Defense Robert M. Gates said the future threat of a cyber attack is "huge," while there is a "considerable current threat." "That's just the reality we all face," he said according to a transcript of his comments. The link for this article located at Information Week is no longer available. . During a dialogue at the World Economic Forum, Security Chief Lee cautions about massive digital risks facing America's foundational systems.. Cybersecurity, Threat Assessment, Critical Infrastructure, Cyber Warfare, Defense Security. . Alex
Nov 19, 2010
•
Government
81
governmentterrorismprivacyGovernment's Approach to Balancing Security and Privacy Rights
If you don't want the government to do what it must to protect you from terrorists, you should butt out, said Heather MacDonald, a lawyer at the Manhattan Institute, a conservative think tank. She made her remarks Wednesday at the 13th . . . . If you don't want the government to do what it must to protect you from terrorists, you should butt out, said Heather MacDonald, a lawyer at the Manhattan Institute, a conservative think tank. She made her remarks Wednesday at the 13th annual Computers, Freedom and Privacy conference. And, she urged, stop all the panic-stricken screaming, because it's endangering human lives. Al-Qaida and other terrorist groups wield technology as a weapon with no worries about privacy rights, MacDonald said. But fear and distrust of anti-terrorism and surveillance technology hampers the U.S. government's ability to shore up defenses and stop attacks before they happen. The link for this article located at Wired.com is no longer available. . If you don't want the government to do what it must to protect you from terrorists, you should butt . don't, government, protect, terrorists, should. . LinuxSecurity.com Team
Apr 04, 2003
•
Privacy
82
securitynetworkinggovernmentHomeland Security Summit 2023: Explore Technology and Ventures in Defense
In a sure sign of the changing times, executives from promising technology start-ups will rub elbows with venture capitalists and representatives from the federal government at an exclusive Florida resort next month to hatch ideas for one of the hottest areas . . . . In a sure sign of the changing times, executives from promising technology start-ups will rub elbows with venture capitalists and representatives from the federal government at an exclusive Florida resort next month to hatch ideas for one of the hottest areas of technology investment these days: domestic defense. Dubbed "The Technology & Homeland Security Summit," the two-day event will be held in Orlando November 1-2, according to the summit organizers, Infinite Personal Networks LLC. An exclusive event, the summit is limited to only 35 participants and requires parties interested in attending to submit an application "describing their role in the homeland security industry" before being allowed to attend. For those whose applications are accepted, the registration fee for the conference is $3,000, a price that does not include travel or accommodations, according to information provided by the organizers. The link for this article located at idg.net is no longer available. . In a sure sign of the changing times, executives from promising technology start-ups will rub elbows. changing, times, executives, promising, technology, start-ups, elbows. . Anthony Pell
Oct 17, 2002
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!