Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 3 articles for you...
81
cyber attackpersonal datahacker tacticsExploring Cyber Blackmail: A Chinese Hacker's Attack on Privacy
How a Chinese hacker used my private nickname, personal emails, and sensitive documents to try to blackmail me.. In 2007, I opened an email from an unknown sender. The message greeted me by a nickname known only to family and close friends. I was in Shanghai, unwinding late at night after a long day, pleased to be contacted by someone familiar from across the Pacific. I figured someone close to me must have gotten a new email address. But the note was signed The link for this article located at Slate is no longer available. . In 2007, a faceless individual took advantage of my personal alias and confidential information in a misguided attempt at extortion. Delve into the unsettling specifics.. Chinese Hacker, Privacy Threat, Personal Information, Email Security, Cyber Attack. . LinuxSecurity.com Team
Feb 11, 2013
•
Privacy
83
security advisorycriticalthreatAdobe Flash Player Critical Advisory: Email Exploit Attack Detected
An Adobe security advisory warns of a new critical vulnerability in Flash Player 10.2.153.1 for Windows, Macintosh, Linux and Solaris, Flash Player 10.2.156.12 for Android and the Authplay.dll component in Adobe Reader and Acrobat X 10.0.2 and all earlier versions. . There are already reports that the vulnerability is being exploited using crafted .swf files embedded in Microsoft Word .doc files which are sent as an email attachment. The vulnerability can, when exploited appropriately, allow an attacker to take control of a system. The Krebs on Security blog reports that the vulnerability has been used as part of a targeted spear-phishing campaign disguised as important government documents and launched against organisations or individuals who work for the US government. Another example of the attack shows an email with a title of "Disentangling Industrial Policy and Competition Policy In China" with a supposed copy of an article on that subject attached. The link for this article located at H Security is no longer available. . There are already reports that the vulnerability is being exploited using crafted .swf files embedde. adobe, security, advisory, warns, critical, vulnerability, flash, player. . LinuxSecurity.com Team
Apr 12, 2011
•
Hacks/Cracks
81
cyber attackemail exploitsecurity reportMandiant Report on Smart Card Proxy Techniques for Network Breaches
The U.S. government has been stepping up its use of smart cards to help lock down its computer networks, but hackers have found ways around them.. Over the past 18 months, security consultancy Mandiant has come across several cases where determined attackers were able to get onto computers or networks that required both smart cards and passwords. In a report set to be released Thursday, Mandiant calls this technique a "smart card proxy." The attack works in several steps. First, the criminals hack their way onto a PC. Often they'll do this by sending a specially crafted e-mail message to someone at the network they're trying to break into. The message will include an malicious attachment that, when opened, gives the hacker a foothold in the network. The link for this article located at PC World is no longer available. . Over the past 18 months, security consultancy Mandiant has come across several cases where determine. government, stepping, smart, cards, computer, netwo. . LinuxSecurity.com Team
Jan 27, 2011
•
Privacy
77
security advisorycriticalcode executionSpamAssassin: Critical Advisory for Milter Code Execution Vulnerability
The SpamAssassin Milter plug-in which plugs in to Milter and calls SpamAssassin, contains a security vulnerability which can be exploited by attackers using a crafted email to inject and execute code on a mail server. The SpamAssassin Milter plug-in is frequently used to run SpamAssassin on Postfix servers.. In order to exploit the vulnerability, the plug-in must be called with the -x expand flag. For attackers to obtain root privileges, as the author of the security advisory proclaims, the plug-in has to be started as root The link for this article located at H Security is no longer available. . In order to exploit the vulnerability, the plug-in must be called with the -x expand flag. For attac. spamassassin, milter, plug-in, which, plugs, calls, security. . LinuxSecurity.com Team
Mar 18, 2010
•
Server Security
83
security incidentcybersecurity breachstate departmentEmail Exploits Lead to State Department Security Incident
A break-in targeting State Department computers worldwide last summer occurred after a department employee in Asia opened a mysterious e-mail that quietly allowed hackers inside the U.S. government's network. . In the first public account revealing details about the intrusion and the government's hurried behind-the-scenes response, a senior State Department official described an elaborate ploy by sophisticated international hackers. They used a secret break-in technique that exploited a design flaw in Microsoft software. The link for this article located at Yahoo! News is no longer available. . Explore the incursion at the Treasury Department where cybercriminals exploited vulnerabilities in Adobe systems. Learn additional details!. Email Exploit,Hacker Intrusion,State Department Cybersecurity. . LinuxSecurity.com Team
Apr 19, 2007
•
Hacks/Cracks
77
security advisorysystem managementmalicious codeUsermin Security Advisory: Exploit Risk From Malicious Email Code Execution
A bug in Usermin, a widely-used administration console for Unix and Linux, could allow an attacker to run malicious code via a specially-crafted email, according to security researchers. . . .. A bug in Usermin, a widely-used administration console for Unix and Linux, could allow an attacker to run malicious code via a specially-crafted email, according to security researchers. Usermin allows users of Unix and Linux to administer their own accounts on a network via a Web-based interface, including reading email. The tool isn't included in Unix or Linux distributions by default, but is often used with Webmin, one of the most popular system administration tools, which ships with Linux distributions such as Suse, Mandrake and Gentoo. A separate, less serious bug affects both Webmin and Usermin, researchers said. The link for this article located at Matthew Broersma is no longer available. . An issue in Usermin, a popular administrative interface for Unix/Linux systems, has the potential to enable harmful email strategies to run malicious code.. Usermin Bug, Email Exploit, Admin Security. . LinuxSecurity.com Team
Sep 14, 2004
•
Server Security
83
steganographyonline securityemail exploitPhishing Attacks: Steganography Threatens Corporate Security
In the escalating clash between online scammers and security vendors, the attackers have once again developed new tactics that give them the upper hand in bypassing filters and infiltrating corporate networks, experts say. . . .. The new techniques, which experts began seeing sporadically earlier this year and in large waves in recent weeks, involve the use of a process called steganography, or embedding or hiding text in an image. In the most recent cases, spam and phishing messages have incorporated complex images containing text. In some cases, the image files include hidden code designed to exploit known vulnerabilities in e-mail clients and Web browsers. The most prominent example of the steganography wave is a recent variation on the ubiquitous Citibank phishing scam that attempts to lure recipients into disclosing online banking user names and passwords. Previous versions used text and images, such as authentic-looking Citibank logos and privacy seals. But versions that began surfacing recently are made up of one large image file containing all the text. "We continually modify our systems to enhance safeguards for our customers," said a spokesperson for Citibank, a unit of Citigroup Inc., in New York. "It is also important that consumers be aware of these issues and act appropriately." The link for this article located at Dennis Fisher is no longer available. . The new techniques, which experts began seeing sporadically earlier this year and in large waves in . escalating, clash, between, online, scammers, security, vendors, attackers, again. . LinuxSecurity.com Team
Sep 13, 2004
•
Hacks/Cracks
81
privacy issueemail exploitsnooping technologyE-Mail Privacy Alert: Exploit Revealed to View Forwarded Messages
A newly identified snooping technology allows someone sending an e-mail to see what the recipient wrote when it is forwarded on to another user, an Internet privacy group announced Monday. It really is a wiretap and it's "very illegal and very . . . . A newly identified snooping technology allows someone sending an e-mail to see what the recipient wrote when it is forwarded on to another user, an Internet privacy group announced Monday. It really is a wiretap and it's "very illegal and very easy to do," said Richard Smith, chief technology officer for the Privacy Foundation based in Denver, in a column he wrote for the non-profit educational and research organization. The vulnerability exists in mail that uses HTML (HyperText Markup Language). A few lines of JavaScript can be embedded in an e-mail message and allows the recipient's mail to be returned to the original sender. It only works, however, if the recipient's e-mail program is set to read JavaScript. The link for this article located at CNN is no longer available. . A newly identified snooping technology allows someone sending an e-mail to see what the recipient wr. newly, identified, snooping, technology, allows, someone, sending, e-mail, recipient. . LinuxSecurity.com Team
Feb 05, 2001
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!