Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 16 articles for you...
76
embedded Linuxembedded systemsopen source summitEmbedded Open Source Summit 2023 Agenda: IoT Innovations and More
The Linux Foundation has just announced the full schedule for the Embedded Open Source Summit, which will take place on June 27-30, 2023 in Prague, Czech Republic, as well as virtually starting on June 26. . Over 175 sessions, birds of a feather (BoF) tracks, and workshops related to embedded and open-source innovation will be presented at the event itself comprised of six micro conferences: Automotive Linux Summit Europe, Embedded IoT Summit, Embedded Linux Conference, LF Energy Embedded Summit, Safety-Critical Software Summit, and Zephyr Project Developer Summit. Even though I’m not going to attend personally, I’ve gone through the schedule to create my own little virtual schedule with some sessions relevant that should be interesting to me and hopefully to CNX Software readers. The first day of the event will have a Yocto Dev training in the morning, and a bunch of virtual sessions that are shown to start at 12:00, but the time is not relevant, as those appear to be on-demand sessions that you can watch when convenient. . Dive into the Embedded Computing Conference 2023, featuring over 175 sessions focused on IoT advancements, Embedded Linux developments, and a spectrum of cutting-edge technologies.. Embedded Summit 2023, Zephyr OS, IoT Innovations, Embedded Linux, Open Source Conference. . Brittany Day
Apr 16, 2023
•
Organizations/Events
209
open sourcesecurity featurescustomizationExploring Factors Driving Linux OS Market Growth Through 2029
The global linux operating system market was valued at 5.33 Billion U.S. dollars in 2021 and is expected to grow to 22.15 Billion U.S. dollars in 2029, at a Compound Annual Growth Rate (CAGR) of 19.8% during the forecast period. . Factors affecting the growth ofLinux Operating System Market (2023-2029): Cost: Linux is an open-source operating system, meaning it is free to use and distribute. This makes it an attractive option for organizations and individuals looking to reduce software costs. Security: Linux is known for its security features, such as built-in firewalls and secure user permissions. This makes it a popular choice for organizations that need to protect sensitive data. Customizability: Linux is highly customizable, allowing users to tailor the operating system to their specific needs. This makes it a popular choice for organizations with unique requirements. Support: Linux has a large and active community of users and developers, providing a wealth of support and resources. This makes it a popular choice for organizations that need a stable and well-supported operating system. Scalability: Linux is a highly scalable operating system, making it suitable for use on a wide range of hardware and in various environments such as cloud, IoT, and embedded systems. Cloud Computing: Linux has been widely adopted in cloud computing infrastructure and services such as Amazon Web Services, Microsoft Azure and Google Cloud Platform, OpenStack, Kubernetes etc. IoT and Embedded systems: Due to its small footprint, low power consumption and customizability, Linux is widely used in IoT and embedded systems devices such as routers, cameras, smart devices, etc. . Between 2023 and 2029, the growth of the Linux operating system market is driven by cost-effectiveness and strong security features, leading to wider adoption.. Linux Market Growth, Open Source Benefits, Linux Customization, Cloud Infrastructure, Security Features. . Brittany Day
Jan 18, 2023
•
Security Trends
214
secure codingembedded systemsapplication developmentUtilizing Rust Language for Secure IoT Applications on Azure Sphere
The hope? To grease the security skids for internet-connected devices – and they need all the help they can get. . Developers can now use the Rust programming language when creating applications on Azure Sphere platform for internet-connected devices. Programmers can apply the performance and security capabilities within Rust to make software for Internet of Things devices and other embedded systems that can be the target of botnets and other malware. "Rust and Azure Sphere are a good match – a programming language that can improve safety of code with strict compile time safety checks alongside Azure Sphere's secure identity, update, and end-to-end encrypted communication services for internet-connected devices should provide greater security to the customer applications," Akshatha Udayashankar, an embedded software engineer at Microsoft, wrote in a blog post this week. . Programmers may leverage Rust for creating software on Azure Sphere, enhancing both safety and efficiency.. Azure Sphere, Rust Programming, IoT Security, Embedded Development. . Brittany Day
Jan 16, 2023
•
IoT Security
79
embedded systemssmart devicesRustKataOS: Google’s New OS for Smart Devices With Enhanced Security
Google this week has announced the release of KataOS as their newest operating system effort focused on embedded devices running ambient machine learning workloads. KataOS is security-minded, exclusively uses the Rust programming language, and is built atop the seL4 microkernel as its foundation. . KataOS is intended for use with the ever-growing number of smart devices with a particular emphasis on embedded hardware running machine learning applications. Given the increasing industry focus of RISC-V, that CPU architecture is a primary support focus for KataOS. Learn more about this Google effort via their Open-Source Blog . KataOS code is being worked on via GitHub under the AmbiML umbrella . The link for this article located at Phoronix is no longer available. . KataOS aims to revolutionize smart technology, prioritizing compact devices and artificial intelligence, all while upholding advanced security measures.. KataOS, Embedded Systems, Rust Programming, seL4 Microkernel, Smart Devices. . LinuxSecurity.com Team
Oct 17, 2022
•
Security Projects
214
security advisoryremote code executionLinux toolsBusyBox: Addressing 14 Flaws for Better IoT Update Practices
Security researchers have found and reported 14 vulnerabilities in the BusyBox userspace tool that's used in millions of embedded devices running Linux-based firmware. While the flaws don't have high criticality, some of them do have the potential to result in remote code execution (RCE). These flaws highlight the need for consistent IoT updates. . BusyBox is a software utilities suite that its creators describe as the Swiss army knife of embedded Linux. It contains implementations of the most common Linux command-line tools, together with a shell and a DHCP client and server, all packaged as a single binary. BusyBox has become a de facto standard in the embedded Linux userspace, its standalone binary having support for over 300 common Linux commands. "You’re likely to find many OT and IoT devices running BusyBox, including popular programmable logic controllers (PLCs), human-machine interfaces (HMIs), and remote terminal units (RTUs)—many of which now run on Linux," researchers from DevOps specialist firm JFrog said in a report . "We inspected JFrog’s database of more than 10,000 embedded firmware images [...]. We found that 40% of them contained a BusyBox executable file that is linked with one of the affected applets, making these issues extremely widespread among Linux-based embedded firmware. . Uncover the latest vulnerabilities in BusyBox that put IoT gadgets at risk, highlighting the importance of consistent firmware maintenance.. BusyBox Flaws, IoT Security Issues, Embedded Linux Risks, Remote Code Execution, Firmware Consistency. . Brittany Day
Nov 11, 2021
•
IoT Security
79
security standardsembedded systemsLinux FoundationseL4 Microkernel Joins Linux Foundation to Advance Security Initiatives
The seL4 microkernel - the world's first operating system (OS) kernel that is proved secure - is now back by the Linux Foundation. . The Linux Foundation , the nonprofit organization enabling mass innovation through open source, today announced it will host the seL4 Foundation, the nonprofit organization established by Data61, the digital specialist arm for Australia’s national science agency CSIRO. The seL4 microkernel is the world’s first operating system (OS) kernel that is proved secure; it is designed to ensure the security, safety and reliability of real-world critical computer systems. The new Foundation aims to accelerate the development of seL4 and related technologies, and under the Linux Foundation will provide a global, independent and neutral organization for funding and steering the future evolution of seL4. Founding members include Cog Systems, DornerWorks, Ghost Locomotion, HENSOLD Cyber and UNSW Sydney. The trustworthiness of embedded computing systems is vital to improving the security of critical systems around the world to safeguard them from cyber threats. This is particularly paramount in industries including avionics, autonomous vehicles, medical devices, critical infrastructure and defense. The seL4 microkernel is the world’s first operating system with a proof of implementation correctness and presents an unparalleled combination of assurance, generality and performance, making it an ideal base for building security- and safety-critical systems. The seL4 Foundation provides a forum for developers to collaborate on growing and integrating the seL4 ecosystem. The link for this article located at Linux Foundation is no longer available. . The Open Source Initiative supports the OpenAPI Initiative to promote the evolution of the premier specification for API descriptions.. seL4 Microkernel, Linux Foundation, Embedded Computing, Cybersecurity Innovations. . LinuxSecurity.com Team
Apr 08, 2020
•
Security Projects
67
security analysisembedded systemsprotocol securityAssessing Weak Crypto Threats in Open Smart Grid Protocol
In the three years since its inception, the Open Smart Grid Protocol has found its way into more than four million smart meters and similar devices worldwide.. And like its SCADA, industrial control system, and embedded system brethren, it The link for this article located at ThreatPost is no longer available. . The reliance on smart devices in the Open Smart Grid Protocol creates vulnerabilities from weak cryptographic measures, risking user privacy and energy reliability. Open Smart Grid, Crypto Risks, Security Measures. . LinuxSecurity.com Team
May 08, 2015
•
Cryptography
83
Linux securityrootkitthreat preventionSecure Boot Strategies To Prevent Rootkit Attacks In Linux Systems
The Linux OS is likely to become even more popular as 32bit computing becomes a commodity and projects like Yocto make it easier to create, develop and maintain Linux based systems for embedded applications. . One of the advantages of Linux is that it enables OEMs to become more like startups, where agile hardware development teams speed time to market by using an OS to abstract the underlying hardware details. However, despite its benefits, a Linux system can be vulnerable to rootkits unless its embedded processor is booted properly. The link for this article located at New Electronics UK is no longer available. The link for this article located at New Electronics UK is no longer available. . Unix provides manufacturers with a robust methodology for creating fortified infrastructures, effectively countering malware risks.. Secure Boot Design, Rootkit Prevention, Embedded Linux Security. . LinuxSecurity.com Team
Oct 31, 2014
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!