Network Security
system security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Vendors/Productsincident response cloud security
incident response cloud security Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
May 19, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
78
security advisorydenial of servicesecurity issueNvidia: Critical Security Advisory on Driver Flaws: DoS, Data Tampering
Nvidia's recent announcement regarding multiple significant vulnerabilities in their GPU display drivers and VGPU software has presented admins relying on these drivers with significant security challenges. Mid-January updates revealed seven distinct security flaws that may compromise system security and stability for those using this hardware. . Two high-severity issues pose extreme threats ranging from data tampering, denial of service attacks, information disclosure, or code execution if left unaddressed. To help you understand and mitigate these flaws, we'll explore these bugs in more depth and share proactive strategies for securing your Linux environment. Understanding These Nvidia GPU Driver Vulnerabilities Nvidia's January updates addressed seven vulnerabilities in their GPU display driver and VGPU software, with two being critical vulnerabilities affecting access to filesystem resources and memory leakage. While some vulnerabilities pose less risk than others, leading to scenarios like unauthorized file access or memory leaks, more serious ones present the opportunity for denial of service attacks, data tampering, or complete system compromise through code execution. CVE-2024-0149 and CVE-2024-0146 are of particular concern to Linux administrators. CVE-2024-0149 allows unauthorized file access on Linux drivers, potentially leading to leakage of sensitive information. In contrast, CVE-2024-0146 can lead to denial of service attacks, data tampering, information disclosure, and code execution attacks against VGPU software. Given their ability to severely disrupt operations while jeopardizing data integrity, these vulnerabilities must be considered top priorities by admins. Updating Your Drivers: The First Line of Defense One key way for us Linux admins to protect against vulnerabilities is to update all Nvidia drivers to the most recent versions. Nvidia has released new versions, including 553.62 and 539.19, that contain patches for these security flaws. Running outdateddrivers exposes your systems to potential exploits. To check your current driver version, use the nvidia-smi command. This utility provides all necessary details about your Nvidia drivers - including their version. Once identified, compare this version against Nvidia's recommended safe versions. If your version is outdated, download and install the latest drivers from their official site. Maintaining system security demands that regular updates be enabled wherever possible or even automatically updated where applicable. By adhering to a set schedule or activating automatic updates where feasible, you can ensure your drivers remain up-to-date and shield against newly discovered vulnerabilities as soon as patches become available. Monitoring and Incident Response At the same time as proactive updates, regularly monitoring your systems is vital. Implementing reliable monitoring tools can detect unusual activity that may indicate an exploitation attempt, such as unexpected spikes in resource consumption, attempts at unauthorized entry, or unusual system behavior. By recognizing anomalies early, you can either prevent potential breaches from happening altogether or minimize their impact. It is also vital to have an effective incident response plan. This should outline what steps should be taken in case of an actual or suspected security breach, so review and practice it regularly with your team so it remains ready. Quick response time can significantly mitigate damage caused by exploits while helping you quickly return to normal operations. The Importance of Backups Never underestimate the importance of regular backups in maintaining a robust security posture. Backups provide you with a safety net in case an attack succeeds and data integrity is compromised, so ensure all critical data is regularly backed up securely in multiple locations. Additionally, test these backups periodically so they can be fully restored when required. Maintaining an extensive backup schedule mightseem like an additional task, but in a severe security breach, having reliable backups can be the difference between a total loss and a swift recovery. Educating Your Team Security isn't only about tools and software updates; it's about people. Ensuring your team understands potential threats and the value of regular updates can make a real difference in incorporating security practices into their daily tasks. Conduct training sessions on recognizing signs of a breach, understanding the importance of prompt patching, and following security best practices diligently. An informed team is more likely to recognize irregularities, adhere to protocols thoroughly, and respond swiftly and appropriately when receiving security alerts. Fostering security awareness within your team will boost your overall defenses against vulnerabilities. Our Final Thoughts on Mitigating These Recent Nvidia Bugs Nvidia's recent alert highlights the importance of maintaining system security through careful vigilance. By staying informed about driver updates, implementing regular monitoring, creating robust incident response plans, and cultivating security awareness within their systems, Linux administrators can safeguard against newly identified vulnerabilities like these. Upgrading to the most up-to-date driver versions, checking Nvidia security bulletins regularly, and following these best practices can reduce risks posed by vulnerabilities in your systems and ensure a secure environment for you and your team. . A couple of critical vulnerabilities present significant risks including unauthorized data alteration, service disruption attacks, and potential remote code execution.. Nvidia Driver Security, GPU Vulnerabilities, System Security, Linux Admin, Update Best Practices. . Brittany Day
Jan 21, 2025
•
Vendors/Products
210
security advisorysecurity issuecritical threatNVIDIA: Driver Update Advisory for Multiple Security Issues
NVIDIA issued a new Security Bulletin, to advise you to update your GPU drivers due to multiple security issues discovered. This bulletin went out today with the email arriving in my inbox moments ago, so here's the details of the issues that affect Linux. . Firstly all driver versions below these are affected: 530.41.03, 525.105.17, 515.105.01 and 470.182.03. So make sure you upgrade if you're on a driver below the version number listed there in each series. The driver actual series doesn't matter, they fixed it it all listed. Driver versions 525.105.17 and 470.182.03 were released today, which along with the security fixes also address other issues (other drivers already out had the fixes). . AMD's recent announcement highlights essential software patches for Windows platforms in light of various vulnerabilities. Act swiftly!. NVIDIA Driver Security Update, Linux Driver Patching, GPU Security Bulletins. . Brittany Day
Mar 31, 2023
•
Security Vulnerabilities
210
security advisoryhigh severitysecurity fixNVIDIA GPU Driver Update: 25 Security Issues Fixed Including High Severity
NVIDIA has released a security update for its GPU display driver, containing a fix for a high-severity flaw that threat actors can exploit to perform, among other things, code execution and privilege escalation. . The latest security update addresses 25 vulnerabilities on the Windows and Linux GPU drivers, while seven flaws are categorized as high-severity. CVE-2022-34671 has a lower severity rating despite being vulnerable to network attacks because of its high complexity, making its exploitation less likely. However, the CVE-2022-34669 flaw is more helpful to hackers and malware developers who already have access to a Windows device and are looking for ways to escalate their privileges or execute code. . A recent patch addresses 30 vulnerabilities in AMD GPU software for both macOS and Ubuntu, improving defenses against potential attacks.. NVIDIA GPU Drivers, High Severity Security, Driver Update, Security Flaws, Linux Drivers. . Brittany Day
Dec 02, 2022
•
Security Vulnerabilities
210
security advisorydenial of serviceprivilege escalationNvidia GPU Drivers Update: Critical Flaws and Solutions for Linux Users
Nvidia has patched several serious security vulnerabilities affecting Windows and Linux devices. These flaws could lead to privilege escalation or denial of service if left unpatched. . Nvidia has patched a number of security flaws in its GPU display drivers for Windows and Linux as well as its Nvidia Virtual GPU ( vGPU ) management software. In total, the company's latest security update addresses six vulnerabilities in its display drivers and 10 security flaws that affect its vGPU management software. If exploited these vulnerabilities could lead to denial of service, escalation of privileges, data tampering or information disclosure on unpatched Windows and Linux systems. Successful exploitation would allow an attacker to escalate privileges or to render machines running vulnerable drivers or software temporarily unusable by triggering a denial of service state. . Nvidia has addressed various vulnerabilities found in its graphics drivers for both Windows and Linux platforms, improving overall security.. Nvidia GPU Drivers, Security Update, Linux Device Protection, DoS Mitigation. . Brittany Day
Jan 11, 2021
•
Security Vulnerabilities
210
security advisoryinformation leakcode executionNvidia Driver Update: Six Bugs Resolved, Including Code Execution Risk
Nvidia has released a set of security updates to remove six vulnerabilities in the Nvidia GPU Display Driver impacting both Linux and Windows machines. . This week, the tech giant published a security advisory for a total of six bugs in the driver, varying in severity with CVSS scores of between 5.5 and 7.8 and impacting both Windows and Linux machines. The first vulnerability, CVE‑2020‑5962, is found in the Nvidia Control Panel component of the driver, in which a local attacker can corrupt system files, leading to denial of service or privilege escalation. . The recent patch from Nvidia tackles five vulnerabilities in their graphics driver, enhancing protection for users on both macOS and Android platforms.. Nvidia Driver Update, Code Execution Bug, Information Leak Fix, Security Updates, Linux Driver Security. . Brittany Day
Jun 26, 2020
•
Security Vulnerabilities
210
security advisoryhigh severitymedium severityIntel: Six Security Advisories for Driver Flaws in Linux and Windows
Are you aware that Intel has published a total of six advisories for security vulnerabilities impacting its products, including the Intel Processor Graphics on Windows and Linux? . Out of the six security flaws , only one comes with a “high” severity rating. Four of them are rated as “medium,” while last one has a “low” rating. The high-severity vulnerability is an escalation of privilege that exists in the Intel VTune Amplifier for Windows, and Intel says the bug was discovered internally by company employees. To resolve the flaw, users must update Intel VTune Amplifier for Windows to version 8 or newer. The link for this article located at Softpedia News is no longer available. . Only one of the six security flaws has a high severity rating, while four are medium and one is low. Read to learn more.. aware, intel, published, total, advisories, security, vulnerabilities, impact. . Brittany Day
Jan 15, 2020
•
Security Vulnerabilities
76
security fixperformance improvementlinux kernelLinux 5.5-rc5: Key Fixes, Performance Boosts, And Security Updates
Linux 5.5development has been picking up in recent days following Christmas week and New Year's but now more upstream developers returning to their keyboards in order to get this next kernel update buttoned up for its debut around month's end. Learn about the fixes and improvements that users can expect when they update to Linux 5.5-rc5: . Linus Torvalds noted that with today's Linux 5.5-rc5 release are "fixes all over" to drivers, core networking, various architectures, and security subsystem fixes. But he sums it up as "a bit of a mixed bag of small fixes all over." One of those Linux 5.5-rc5 fixes worth pointing out isthe AppArmor fix for a performance regressionthat was picked up in our earlier 5.5 benchmarks. In Linus Torvalds brief5.5-rc5 announcementhe also pays tribute to the recent passing of Bruce Evans, a Minix developer responsible for much of the i386 work, back from the days Linus was using it prior to Linux becoming self-hosting. The link for this article located at Phoronix is no longer available. . Explore the new updates in Linux 5.5-rc5, highlighting extensive improvements throughout drivers, optimization, and security features.. Linux Kernel, Performance Improvements, Driver Updates. . Brittany Day
Jan 06, 2020
•
Organizations/Events
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Explore top 10 tips to secure your open-source projects now. Read More