Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -1 articles for you...
67

Security Issues Found In PDF Encryption Methods By PDFex Researchers

You would be forgiven for thinking that encrypting PDFs, before they are stored or sent via email, keeps their contents away from prying eyes. But according to researchers in Germany, it might be time to revisit that assumption after they discovered weaknesses in PDF encryption which could be exploited to reveal the contents of a file to an attacker. Learn more: . Dubbed ‘PDFex’ (PDF exfiltration), the weaknesses documented in Practical Decryption exFiltration: Breaking PDF Encryption by researchers from Ruhr University Bochum and the Münster University of Applied Sciences, offer two attack methods, each with three variants that depend on which PDF viewer is used to open a target document. The link for this article located at Naked Security is no longer available. . Vulnerabilities highlighted by analysts in PDF encryption may jeopardize file integrity via various attack techniques.. PDF Security Flaws, Document Encryption Risks, PDFex Research Insights. . LinuxSecurity.com Team

Calendar%202 Oct 03, 2019 User Avatar LinuxSecurity.com Team Cryptography
83

Wi-Fi Key-Cracking Kits Expose Encryption Weaknesses and Risks

Dodgy salesmen in China are making money from long-known weaknesses in a Wi-Fi encryption standard, by selling network key-cracking kits for the average user.. Wi-Fi USB adapters bundled with a Linux operating system, key-breaking software and a detailed instruction book are being sold online and at China's bustling electronics bazaars. The kits, pitched as a way for users to surf the Web for free, have drawn enough buyers and attention that one Chinese auction site, Taobao.com, had to ban their sale last year. With one of the "network-scrounging cards," or "ceng wang ka" in Chinese, a user with little technical knowledge can easily steal passwords to get online via Wi-Fi networks owned by other people. The kits are also cheap. A merchant in a Beijing bazaar sold one for 165 yuan (US$24), a price that included setup help from a man at the other end of the sprawling, multistory building. The link for this article located at PC World is no longer available. . The rise of low-cost Wi-Fi key-cracking kits in China highlights significant cybersecurity vulnerabilities, prompting urgent calls for stronger encryption and security measures. Wi-Fi Cracking Tools, Network Access, Linux Key-breaking Software. . LinuxSecurity.com Team

Calendar%202 May 06, 2010 User Avatar LinuxSecurity.com Team Hacks/Cracks
77

Frequent SSL Issues: Tips for Developers and Administrators

SSL is a wonderful protocol, but it is frequently used badly. This note is intended to point out some of the more common errors made by applications using SSL. This checklist should be useful for application developers, system administrators, and the occasional penetration tester. This note assumes you have at least a casual knowledge of SSL, but is not a paper about cryptography. If you know enough to write an SSL library, you will know every single one of the mistakes I mention below, plus a few more. Still, I hope that those of you who are writing SSL toolkits will consider why these mistakes are made. Perhaps it will help you design your toolkits so that novices use them correctly. . The link for this article located at Fr33d0m is no longer available. . Frequent SSL blunders by developers, system admins, and security testers. Discover ways to enhance your SSL implementation!. SSL Errors, Application Security, Encryption Guidance. . LinuxSecurity.com Team

Calendar%202 May 22, 2006 User Avatar LinuxSecurity.com Team Server Security
74

Examining 802.11 Security Issues: Wireless Networking Challenges

You would have to be living in a cave not to have heard about the problems with wireless security for networking. Even as more organizations (and homes) take advantage of wireless networking, we hear about "war driving" and that the security features were poorly designed.. . .. You would have to be living in a cave not to have heard about the problems with wireless security for networking. Even as more organizations (and homes) take advantage of wireless networking, we hear about "war driving" and that the security features were poorly designed. WEP (Wireless Equivalent Privacy) was intended to provide the same level of privacy over wireless networks that one would expect from wired networks. WEP is part of the IEEE 802.11 standard document, and defines how encryption must be used to support authentication, integrity, and confidentiality of packets transmitted using wireless equipment. ALl the wireless vendors support 802.11. The IEEE standards committee chose to use RC4, a proven encryption algorithm. But designing systems that use cryptographic tools has often proved harder than it appears. Let's take a look at just how 802.11 networks work, and see just where the problems lie, and what, if anything, can be done to mitigate the problems. The link for this article located at Rik Farrow / Spirit is no longer available. . Wireless security networking vulnerabilities threaten both organizations and individuals, requiring strong encryption, updates, training, and authentication to safeguard data. Wireless Security, 802.11 Standards, Networking Issues, Encryption Flaws. . Anthony Pell

Calendar%202 Dec 19, 2001 User Avatar Anthony Pell Network Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200