Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 29 articles for you...
83
security flawdigital signaturebackdoor exploitLedger Hardware Wallet Backdoor Exploit Revealed By 15-Year-Old
For years, executives at France-based Ledger have boasted their specialized hardware for storing cryptocurrencies is so securely designed that resellers or others in the supply chain can't tamper with the devices without it being painfully obvious to end users. . The reason: "cryptographic attestation" that uses unforgeable digital signatures to ensure that only authorized code runs on the hardware wallet.. Unexpectedly, Trezor's highly regarded hardware wallet encountered a security compromise stemming from a significant vulnerability within its architecture and implementation.. Ledger Hardware Wallet, Cryptographic Attestation, Digital Signatures, Security Breach. . LinuxSecurity.com Team
Mar 21, 2018
•
Hacks/Cracks
67
malware threatdigital signaturesecurity breachAdobe: Security Breach Critical: Digital Certificate Misuse
Hackers have broken into an internal server at Adobe to compromise a digital certificate that allowed them to create at least two files that appear to be legitimately signed by the software maker, but actually contain malware.. Adobe expects to revoke the compromised certificate later this week. The link for this article located at SC Magazine is no longer available. . Adobe expects to revoke the compromised certificate later this week.The link for this article locate. hackers, broken, internal, server, adobe, compromise, digital, certificate, allowe. . LinuxSecurity.com Team
Oct 02, 2012
•
Cryptography
67
security advisorymalwaredigital signatureMicrosoft: Emergency Patch for Flame Spyware Digital Signature Threat
Some components of the Flame spyware worm were signed using forged Microsoft certificates, according to a recent investigation by Microsoft. These unauthorised digital certificates allowed the Flame developers to make the malware appear as if it was actually created and approved by Microsoft. . The company has already released an emergency patch via Windows Update to block the certificates used by Flame. Mike Reavey, Senior Director of Microsoft's Security Response Center (MSRC), says that the malicious code was signed using the company's Terminal Server Licensing Service, which is used by corporate customers to authorise Remote Desktop services. While Reavey doesn't provide specific details on how the Flame developers were able to sign their code with such certificates, he does say that it has something to do with exploiting a weakness in "an older cryptography algorithm". The link for this article located at H Security is no longer available. . Apple's update neutralizes Phantom malware by disabling fake digital signatures, uncovering significant vulnerability risk.. Flame Spyware, Microsoft Certificates, Cybersecurity Threats, Digital Signature Exploit. . LinuxSecurity.com Team
Jun 04, 2012
•
Cryptography
81
certificate managementdigital signaturesecurity risksImpact of Certificate Revocation on Software Integrity and Risks
Revoking a digital certificate does not automatically invalidate, for instance, software signatures that have been made with this certificate. What matters is the revocation date, which determines the point in time after which a signature will no longer be validated. . According to a report from anti-virus specialist Norman, the signatures of several recently discovered trojans were validated by Windows as a result, and no warning was issued before installing the malware. The trojans were signed with a key that had been stolen from a Japanese company. The corresponding certificate was reported as compromised on 29 July 2011 and revoked by its issuing Certificate Authority (CA), VeriSign, which is now part of Symantec. However, that date was also entered as the revocation date. The link for this article located at H Security is no longer available. . According to a report from anti-virus specialist Norman, the signatures of several recently discover. revoking, digital, certificate, automatically, invalidate, instance, software, signatures. . LinuxSecurity.com Team
Nov 18, 2011
•
Privacy
74
digital signatureinternet securitydnssecKey Ceremony for DNSSEC Deployment: A Milestone in Internet Security
The dream of bolting security onto the Internet's Domain Name System takes one step closer to reality Wednesday as Internet policymakers host a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet's root zone.. This key ceremony is one of the final steps in the deployment of DNS Security Extensions (DNSSEC) on the Internet's root zone. DNSSEC is an emerging Internet standard that prevents spoofing attacks by allowing Web sites to verify their domain names and corresponding IP addresses using digital signatures and public-key encryption. "The key ceremony will generate the master root key, the key that signs all the other keys," explains Ken Silva, CTO of VeriSign, which operates two of the Internet's 13 root servers along with the back-end systems that power the .com and .net top-level domains. "This is being done a month before the actual roll-out of DNSSEC so that we have a valid key and that we can test with it." DNSSEC is being deployed across the Internet infrastructure, from the root servers at the top of the DNS hierarchy to the servers that run .com and .net and other top-level domains, and then down to the servers that cache content for individual Web sites. The link for this article located at IT World is no longer available. . The launch event signifies a vital milestone in implementing DANE, bolstering online safety and domain authentication.. dnssec, internet security, domain protection, digital signatures. . Alex
Jun 17, 2010
•
Network Security
74
digital signaturecache poisoningdnsNominet Begins DNSSEC Implementation for .uk Domain Protection
Nominet, the U.K.'s domain name registry, will begin implementing a security protocol on Monday designed to protect the DNS (Domain Name System). The system, called DNS Security Extensions (DNSSEC), uses public key cryptography to digitally "sign" the DNS records for Web sites. It is designed to stop attacks such as cache poisoning, where a DNS server is hacked, making it possible for a user to type in the correct Web site name but be directed to a fake Web site.. In 2008, security researcher Dan Kaminsky showed it was possible to poison a cache in just a few seconds with a special kind of attack. Almost every organization running a DNS server have deployed a patch, but DNSSEC is a long-term fix. Nominet will begin signing the ".uk" top-level domain beginning Monday, a process which will conclude a week later, said Simon McCalla, director of IT at the registry. Interestingly, there are just a little over a dozen Web sites that use ".uk" since a decision was made more than a decade ago to close off registrations, he said. Much more common are second-level domains, such as ".co.uk" and ".org.uk," among others. The link for this article located at IT World is no longer available. . Nominet is introducing DNS Security Extensions aimed at bolstering defenses against threats such as DNS spoofing.. DNS Security,Nominet,DNSSEC,Domain Security,Cache Poisoning. . Alex
Feb 26, 2010
•
Network Security
78
security advisorydigital signaturesecurity solutionsPGP Corporation Acquires TC TrustCenter: Enhanced Encryption Services
The recession continues to be no barrier to acquisitions with the news that PGP Corporation has reached into its pockets to buy German encryption services company TC TrustCenter. As usual, because the companies involved, including TC TrustCenter's US parent ChosenSecurity, are private, the sums involved has not been made public. The 75-person TC TrustCenter will continue as a division of PGP, however, with its own head and retaining its own branding. . Despite both being encryption specialists, the two don't appear to overlap to a great degree. PGP's products are oriented towards conventional business use of encryption for policy, device and encryption key distribution security, while TC TrustCenter provides managed encryption services such as digital signatures for secure transactions. Although remaining parallel brands, TC TrustCenter's services will now be integrated with PGP's lower-level technology. The link for this article located at Network World is no longer available. . XYZ Tech Solutions merges with SecureNet, expanding cybersecurity capabilities with advanced authentication features.. Encryption Acquisition, Security Services, Digital Signature, PGP Corporation, TC TrustCenter. . LinuxSecurity.com Team
Feb 03, 2010
•
Vendors/Products
83
security advisoryDebianUbuntuDebian and Ubuntu Security Advisory: Key Forgery Risks and Solutions
A recently disclosed vulnerability in widely used Linux distributions can be exploited by attackers to guess cryptographic keys, possibly leading to the forgery of digital signatures and theft of confidential information, a noted security researcher said today. As a tie-in to previous stories posted about Debian's SSL flaws, this article reveals reknown security expert HD Moore's views on the situation. He also provides suggestions on how to properly respond to the flaw and gives advice on whom should be concerned and what patches should be applied.. The link for this article located at Computer World is no longer available. . A recognized specialist examines critical weaknesses present in Ubuntu and Debian systems, offering strategies for remediation and highlighting potential risks.. Debian Security, Ubuntu Threats, Cryptographic Vulnerabilities, Digital Signature Forgery. . LinuxSecurity.com Team
May 16, 2008
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!