Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
email security Linux server
email security Linux server You've probably trained your team to look for red flags. Odd sender names, urgent language, mismatched links. But a well-crafted spoofed email won't trip any of those wires. It looks legitimate, sounds legitimate, and often comes from a domain that passes every automated check you throw at it. . Attackers know exactly how humans scan an inbox. They design around it. This guide walks you through the techniques attackers use to slip a spoofed email past both your filters and your users and what...
Jul 25, 2026
Security Vulnerabilities cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
83
phishingaccount securityemail fraudFDIC Warns About Phishing Scams Targeting Banking Accounts
Scammers are trying to steal banking information using fake e-mails that look like they've come from the U.S. Federal Deposit Insurance Corporation, the FDIC warned Wednesday. The phishing e-mails tell the victim his account has been suspended "due to account activity that violates the Patriot Act," and instructs him to use a system called IDVerify to confirm bank account information. . In reality, there is no such thing as an FDIC IDVerify system. People who click on the IDVerify link actually go to a server controlled by the criminals. It either steals the bank account information or tries to install malicious software on the victim's computer, the FDIC said in an alert sent to banks and consumers on Wednesday. The FDIC has received "numerous" reports of the scam e-mail, the statement said. It is trying to figure out who's behind the scam, and it encourages people who receive these e-mails to forward them to
Jan 13, 2011
•
Hacks/Cracks
83
phishingscaminternet securityInvestigating Political Donation Scams and Their Phishing Techniques
Like other common "phishing" schemes, which involve e-mail requests that seem to be from trusted sources such as eBay or Citibank, the Kerry messages asked potential donors to go to an outside Web site to give money. Those Web sites, one registered in India, the other in Texas, were not affiliated with the Kerry campaign. . . .. An Internet security company says some e-mails asking for donations to U.S. presidential candidates are scams trying to steal unwary consumers' credit card numbers. Researchers for SurfControl, a company that offers e-mail filtering software, say they found two examples of suspect e-mails last weekend, both purporting to be from Democrat John Kerry's campaign. Like other common "phishing" schemes, which involve e-mail requests that seem to be from trusted sources such as eBay or Citibank, the Kerry messages asked potential donors to go to an outside Web site to give money. Those Web sites, one registered in India, the other in Texas, were not affiliated with the Kerry campaign. . An Internet security company says some e-mails asking for donations to U.S. presidential candidates . other, common, 'phishing', schemes, which, involve, e-mail, requests, trusted. . LinuxSecurity.com Team
Aug 04, 2004
•
Hacks/Cracks
81
social engineeringphishingidentity theftSignificant Rise In Phishing Incidents: 282 Attacks Reported February
Despite a handful of successful criminal prosecutions and an increase in public awareness, February saw a marked increase in the number of new variations of the spam-borne swindle called "phishing," according to a report from an industry group released Friday. The Anti-Phishing Working Group charted 282 unique attacks last month, a 60 percent increase above the 176 attacks spotting in January, the group says. "The number of attacks is growing, and the rate of increase is growing," says Dan Maier, director of marketing for the group. . . .. Despite a handful of successful criminal prosecutions and an increase in public awareness, February saw a marked increase in the number of new variations of the spam-borne swindle called "phishing," according to a report from an industry group released Friday. The Anti-Phishing Working Group charted 282 unique attacks last month, a 60 percent increase above the 176 attacks spotting in January, the group says. "The number of attacks is growing, and the rate of increase is growing," says Dan Maier, director of marketing for the group. In a phishing attack, a fraudster spams the Internet with e-mail purporting to be from a reputable financial institution or e-commerce site, and urging the recipient to click on an included link to update their personal profile or carry out some transaction. The link takes the victim to a fake website designed to look like the real thing, but where any personal or financial information entered is routed to the scammer. The most audacious variants of the scam demand a victim's name, address, credit card number, expiration date, three-digit CCV number, ATM code, social security number, and other information useful for credit card fraud and identity theft. As in months past, eBay was the most commonly-spoofed company in the February line-up, with 104 different scam messages in circulation. Citibank and PayPal were a distant second and third place with 58 and 42 respectively. Overall, the swindlers appear to be using a wider variety of scammy mailings,but are drawing on a smaller pool of brands, says Maier. "The interesting thing about that is, phishers seem to be focusing on sending more of these attacks at high-value targets, because some of the extraneous targets have dropped off a bit," he says. The link for this article located at SecurityFocus is no longer available. . In light of growing awareness, cyber scams escalate, with recorded cases reaching 315 in March, indicating a notable rise.. Phishing Attacks, Email Fraud, Identifying Threats, Cybersecurity Trends. . LinuxSecurity.com Team
Mar 24, 2004
•
Privacy
81
fraud detectionsecurity alertemail fraudOver 100,000 Emails Intercepted By Bank Of England Fraud Alert
The Bank of England said Tuesday that it had intercepted more than 100,000 fraudulent e-mails masquerading as computer security software issued by the central bank. . . .. The Bank of England said Tuesday that it had intercepted more than 100,000 fraudulent e-mails masquerading as computer security software issued by the central bank. The bogus e-mail, which disguises itself as a message from a Bank of England administrator, instructed recipients to download a file attachment designed to protect individuals' banking details from fraudsters. The Bank of England said it received scores of queries from companies and individuals asking about the e-mail's authenticity. It advised recipients to delete it immediately. The e-mail comes amid a string of e-mail and Web site hoaxes posing as British banking institutions. In the past few months, a rash of fake e-mails claiming to be from some of the world's biggest banks have appeared in e-mail in-boxes, attempting to dupe banking customers into divulging their bank details. A representative from the central bank said technicians were working with the United Kingdom's National Hi-Tech Crime Unit to determine what, if anything, the file attachment was capable of, and who may have sent it. . The Federal Reserve detected more than 150,000 counterfeit messages posing as financial compliance initiatives.. Email Fraud, Phishing Attack, Banking Scam, Security Alert, Hoax Report. . LinuxSecurity.com Team
Dec 31, 2003
•
Privacy
82
anti-spam lawcybersecurity incidentlegal enforcementVirginia Charges Two Men With Felony Anti-Spam Violations
DULLES, Virginia (CNN) -- Virginia authorities Thursday announced felony charges against two men accused of violating the state's new anti-spam law. They described the indictments as the first of their kind.. . .. DULLES, Virginia (CNN) -- Virginia authorities Thursday announced felony charges against two men accused of violating the state's new anti-spam law. They described the indictments as the first of their kind. Jeremy Jaynes and Richard Rutowski, both of North Carolina, were charged with sending thousands of unsolicited e-mails bearing falsified routing information. The e-mails hawked investments, mortgage information and software. Many of the servers that processed the e-mails are based in Virginia. Virginia Attorney General Jerry Kilgore said his office was working with North Carolina authorities to extradite the two men to Loudon County, Virginia. Virginia has a particular interest in limiting spam because AOL and other Internet service providers are based in the state. The link for this article located at CNN.com is no longer available. . Virginia officials have indicted two individuals for serious offenses related to spam, mainly due to their distribution of unsolicited emails. spam law, anti-spam enforcement, felony charges, unsolicited emails, cybersecurity incident. . Anthony Pell
Dec 12, 2003
•
Government
81
consumer protectioninvestigationemail fraudFTC Investigation Targets 100 Spammers With Enforcement Actions
An FTC-led investigation led to warnings being sent 100 alleged spammers, telling them to stop immedidately. Plus, it identifies the most likely targets. Altogether, the regulators announced they had filed more than 30 enforcement actions and had sent letters to about 100 alleged spammers warning them to cease sending the unwanted and often fraudulent commercial e-mail messages. . .. An FTC-led investigation led to warnings being sent 100 alleged spammers, telling them to stop immedidately. Plus, it identifies the most likely targets. Altogether, the regulators announced they had filed more than 30 enforcement actions and had sent letters to about 100 alleged spammers warning them to cease sending the unwanted and often fraudulent commercial e-mail messages . Additionally, the regulators announced the results of an investigation into spam, concluding that Net users who post their e-mail addresses in publicly accessible places, such as on chat sites or newsgroups, are highly likely to receive spam as a result. The regulators' action was the third such FTC-led initiative this year to combat spam, noted Brian Huseman, a staff attorney at the FTC. "The FTC and its partners are stepping up law enforcement and consumer education on this topic," Huseman said. The FTC trained its sights on spammers in January, announcing that it would begin taking legal action against those who sent deceptive e-mail messages. In April, the agency along with six U.S. states and Canada announced they had filed 63 enforcement actions and had sent warning letters to 500 sites accused of sending illegal chain letter scams. The FTC announced a similar enforcement action in July. Although states such as California have enacted laws prohibiting spam, there is no comparable federal law. Despite this, the FTC has the power to combat deceptive practices, advertisements or outright fraud. If a company promises in an e-mail to allow customers to "opt out" of receiving further messages but doesn't provide a legitimate opt-out address,the company could run afoul of the FTC. Likewise, the agency can take steps to quash pyramid schemes online or offline. Legal actions taken by the FTC usually take the form of civil, not criminal, complaints that force parties found guilty to pay restitution and cease their activities. As part of Wednesday's announcement, the FTC said that it had filed a complaint against Brian Silverman of Manhattan for allegedly defrauding bidders on eBay. Silverman, who sold laptop computers on the online auction giant's site, defrauded more than 200 bidders out of about $300,000 starting in January, said Ann Weintraub, an attorney with the FTC. Silverman asked bidders to pay him with cashier's checks, money orders or wire transfers, meaning that they had no recourse once he didn't ship their computers, Weintraub said. The FTC is seeking a preliminary injunction against Silverman, whom eBay has suspended twice, she said. "I think that the best thing for people to know is that they should look for sellers that accept credit cards. That's your best protection," she said. Attacking spam With spam becoming a growing problem that is overloading corporate servers as well as individual's mailboxes, lawmakers, regulators, companies and consumers have been taking increasingly desperate measures to combat it. Among the solutions have been laws outlawing spam and attempts to blacklist Internet providers seen as spam-friendly. Some Internet users have even turned to small claims courts to file suit against alleged spammers. But the responses to spam have drawn criticism themselves. Some critics have argued that state-enacted antispam laws violate free speech or the U.S. Constitution's interstate commerce clause, although a California appeals court earlier this year upheld that state's antispam measure. Meanwhile, blacklists have been criticized for blocking access to innocent sites as well as those of spammers. In an effort to study spam, the FTC and state regulators set up 250 e-mail addresses and posted them onvarious places on the Internet. Of those addresses that were posted on chat sites, 100 percent received unsolicited e-mail messages, the FTC said in a statement. Meanwhile, 86 percent of addresses posted on newsgroups and 50 percent of those posted on free personal Web pages received spam, the FTC said. Spammers appear to be getting the e-mail addresses by using automated harvesting programs that comb Web sites looking for "@" signs, the FTC's Huseman said. "If consumers post their e-mail addresses in public places on the Internet, these harvesting programs will pick them up," he said. In addition to the FTC, regulatory agencies involved in Wednesday's announcement included the U.S. Postal Inspection Service; the U.S. attorney for Massachusetts; the New Hampshire Department of Justice; the attorneys general of Connecticut, Maine, New York, Rhode Island and Vermont; and consumer protection departments in New Jersey, New York City and New York state. The link for this article located at ZDNet is no longer available. . An investigation by the FTC has sent warnings to 100 alleged spammers, outlining enforcement actions they must follow.. FTC enforcement actions,email fraud deterrence,spam regulation,consumer protection,deceptive practices. . LinuxSecurity.com Team
Nov 14, 2002
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!