Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
81
network securityprivacy enhancementdns encryptionUnderstanding DNS-Over-HTTPS and Its Impact on User Privacy
All six major browser vendors have plans to support DNS-over-HTTPS (or DoH), a protocol that encrypts DNS traffic and helps improve a user's privacy on the web. Learn more about this protocol, which is already present in all major browsers, that users love and ISPs hate in an interesting ZDNet article: . The DoH protocol has been one of the year's hot topics. It's a protocol that, when deployed inside a browser, it allows the browser to hide DNS requests and responses inside regular-looking HTTPS traffic. Doing this makes a user's DNS traffic invisible to third-party network observers, such as ISPs. But while users love DoH and have deemed it a privacy boon, ISPs, networking operators, and cyber-security vendors hate it . The link for this article located at ZDNet is no longer available. . The DoH framework enhances DNS communications by safeguarding them from external surveillance, thereby bolstering online user confidentiality.. DoH Protocol, Secure DNS, DNS Encryption, Browser Privacy, Networking Security. . LinuxSecurity.com Team
Nov 08, 2019
•
Privacy
67
cybersecurityprivacysecurity protocolEncrypting DNS Lookups: The Controversial Path to Enhanced Privacy
The road to routing all Domain Name System lookups through HTTPS is pocked with disagreements over just how much it will help. What is your opinion on this? Learn the details in an informative Wired article: . The security community generally agrees on the importance of encrypting private data: Add a passcode to your smartphone . Use a secure messaging app like Signal . Adopt HTTPS web encryption . But a new movement to encrypt a fundamental internet mechanism, promoted by browser heavyweights like Google Chrome and Mozilla's Firefox, has sparked a heated controversy. The changes center around the Domain Name System, a decentralized directory that acts essentially as the internet's address book. When you send data to or request it from a server, a DNS lookup ensures that it goes to and comes from the right place. Google and Mozilla plan to encrypt those interactions sometime this year. Which sounds straightforward enough—but not everyone is convinced that the shift solves more problems than it potentially creates. The link for this article located at Wired is no longer available. . The discourse on DNS query encryption via HTTPS is evolving, enhancing online privacy and web standards amidst concerns over centralized control and vulnerabilities. Dns Encryption, Privacy, Internet Standards, Cybersecurity Trends, Data Security. . LinuxSecurity.com Team
Oct 09, 2019
•
Cryptography
81
internet securityprivacy technologyISPsDNS Over HTTPS Threatens ISPs and Government Surveillance Efforts
The penny has finally dropped inside ISPs and governments that a privacy technology called DNS over HTTPS (DoH), backed by Google, Mozilla and Cloudflare, is about to make web surveillance a lot more difficult. . In the UK, this matters because under the 2016 Investigatory Powers Act (IPA), ISPs are required to store a record of which websites citizens visit for the previous 12 months, which is done by noticing Domain Name System (DNS) requests, e.g. to xyz.com. DNS over HTTPS (and its close relative DNS over TLS, or DoT) makes this impossible because it encrypts these requests – normally sent in the clear – hence the panic reported in a recent Sunday Times article (paywall). The link for this article located at NakedSecurity is no longer available. . DNS over HTTPS enhances user privacy against ISP and government surveillance laws like the IPA. Explore its implications.. DNS over HTTPS, web encryption, privacy advancements, ISP surveillance. . LinuxSecurity.com Team
Apr 24, 2019
•
Privacy
74
open sourcenetwork integritysecurity protocolEnhance Network Integrity By Securing DNS With DNSCrypt
This open-source software for Mac and Linux does for DNS what SSL does for HTTP: It encrypts DNS traffic to prevent spoofing, snooping, and man-in-the-middle attacks.. Like most of the network protocols and systems in widespread use today, the Domain Name System (DNS) harbors significant security vulnerabilities. Though DNS provides a deceptively simple service -- translating human-friendly website addresses such as https://www.cnn.com/ into computer-friendly numerical IP addresses such as -- the system's integrity is a crucial cornerstone of Internet operations and trustworthiness. One common attack on the DNS infrastructure is called "DNS spoofing." In this type of attack, also known as "DNS cache poisoning," an attacker tricks a DNS server into returning an incorrect IP address for a target website. For example, an attacker might perform cache poisoning on the DNS entry for a legitimate bank's website, thereby directing visitors to the hacker's fake look-a-like site in order to capture their login or banking details. This type of attack is difficult for users to detect, because the website address displayed in the user's web browser is not altered in any way. A single compromised DNS server at an Internet Service Provider can in this way affect potentially thousands of users. The link for this article located at eSecurity Planet is no longer available. . Like most of the network protocols and systems in widespread use today, the Domain Name System (DNS). open-source, software, linux, encrypts. . Dave Wreski
Mar 20, 2012
•
Network Security
67
internet securitysecure communicationsopen source toolOpenDNS's DNSCrypt: Secure Your DNS Traffic With Encryption
DNS service provider OpenDNS has announced a preview release of a new open source tool to improve internet security: DNSCrypt encrypts all DNS traffic between a user's system and a DNS server. The tool is currently only available for the Mac, with a Windows version promised, and only works with OpenDNS's own DNS service.. Normally, DNS information is exchanged between client and server as plain text which makes it vulnerable to snooping or modification and man-in-the-middle attacks. By encrypting the exchange, OpenDNS hopes to make the "last mile" of DNS requests more secure. DNS Security Extensions (DNSSEC) makes the process more secure by adding authentication to DNS communications, but does not encrypt the actual exchanges. David Ulevitch, the CEO of OpenDNS, says that DNSCrypt is designed to address that shortcoming, noting that it's an implementation of the DNSCurve forwarder concept. The link for this article located at H Security is no longer available. . DNSCrypt secures DNS queries, fortifying defenses against prying eyes and threats, boosting online confidentiality.. DNSCrypt, DNS encryption, OpenDNS Security Tool, Internet Privacy Protection. . LinuxSecurity.com Team
Dec 08, 2011
•
Cryptography
74
openDNSSECdns encryptiontraffic securityOpenDNSSEC Project Launch: Enhancing DNS Traffic Encryption Security
A consortium of security and infrastructure management organisations has launched a new project to help secure Domain Name System (DNS) queries. OpenDNSSEC will provide a way for service providers and hosting vendors to encrypt DNS traffic.. DNS servers allow URL addresses to be linked with the machine address of a site's host server, and are a fundamental aspect of everyday internet use. The system has gone largely unnoticed in the past, but security researchers have been paying increased attention to the DNS service and its perceived weaknesses. Many worry that hackers could compromise DNS servers, and redirect traffic without user knowledge.. OpenDNSSEC focuses on safeguarding DNS communications through cryptographic measures, bolstering user confidentiality and defending against possible threats.. OpenDNSSEC, DNS Security, Traffic Encryption. . Anthony Pell
Feb 10, 2010
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!