Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Ahead With Linux Security News

Ghostlock Hero Esm H350
Security Vulnerabilities Price Tag%201security research open-source

When researchers announced GhostLock, many people focused on the exploit. What stood out to me wasn't just what the vulnerability could do, but how long it had remained hidden. The flaw had lived in the Linux kernel for roughly 15 years before it was publicly identified by researchers. That means the flaw survived hundreds of kernel releases and years of upstream development before it was publicly documented. It raises an uncomfortable question about one of open source's oldest assumptions....
1 min read Security Vulnerabilities
Ssh Esm H350
Network SecurityPrice Tag%201network protection system hardening

Spin up a fresh Linux VPS with default settings and check /var/log/auth.log ninety seconds later. There will already be failed login attempts — not dozens, hundreds, sometimes before the deployment script has even finished running. . Automated bots scan the entire IPv4 address space non-stop, and port 22 with password authentication open is exactly what they're looking for. Most cloud providers have seen enough of this that a new instance gets its first probe within a minute of going live....
4 - 7 min read Network Security
GITEA Vulv Linux Esm H350
Security Vulnerabilities Price Tag%201security advisory critical

If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability— CVE-2026-20896 —shipped directly in Gitea’s official Docker images. It’s a 9.8 CVSS-rated "open door" that lets any unauthenticated attacker stroll in and impersonate any user on your system, admin account included, without needing a password or a token. The reality? This isn't some complex, low-level kernel exploit. It’s a classic "secure-by-default"...
4 - 8 min read Security Vulnerabilities
2.Motherboard Esm H350
Desktop SecurityPrice Tag%201network security system hardening

There was a time when Linux meant server rooms and hobbyist forums. These days it's on regular laptops, and a big part of that is people getting fed up with commercial operating systems scraping their data, shipping telemetry nobody asked for, and boxing them into hardware ecosystems they can't opt out of. . None of that makes Linux immune to trouble though. Yes, it dodges most of the mainstream malware that everyone else deals with. But the software running on top, and honestly the person...
2 - 4 min read Desktop Security
Compromised Data Security Breach Vulnerability By Woolzian Gettyimages 475563052 2400x1600 100788413 Large Esm H350
Network SecurityPrice Tag%201privilege escalation open-source

There's a gap between what Linux systems log by default and what you actually need to detect a compromise. Most environments have logging active, which creates a sense of coverage that doesn't hold up under investigation. . When you start pulling logs after an incident, what you find is fragmented activity — a login here, a process there, but no clear narrative of how access was gained, what was executed, or how far the attacker moved. You piece together a timeline rather than reading one....
2 - 4 min read Network Security
Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -4 articles for you...
79
28.Lock Globe Esm H240
Price Tag%201open source projectGooglemachine learning

KataOS Unveiling: Secure OS For Embedded Machine Learning

Google, one of very few tech companies willing to experiment with new operating systems, has unveiled KataOS for embedded machine learning devices. . KataOS was announced along with Sparrow on the Google Open Source blog . KataOS is the operating system design and Sparrow is the reference implementation, as the Weston display server is the reference implementation of Wayland. The plan is that KataOS will be "a provably secure platform that's optimized for embedded devices that run ML applications." Google is working with Antmicro, which created the seL4-sys crate. Currently the OS is being developed on the Arm64 instruction set, but the plan is to run it on openTitan , which uses RISC-V. . KataOS, introduced alongside Sparrow, serves as a fortified operating system tailored for ML embedded devices. Explore its functionalities and the journey of its creation.. KataOS, Google Operating System, Embedded Machine Learning, Open Source Project. . LinuxSecurity.com Team

Calendar%202 Oct 20, 2022 •User Avatar LinuxSecurity.com Team Security Projects
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics