Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
83
security advisorymalwarevulnerabilityMagento Exploited: Neutrino Kit Infects E-commerce Sites
Some websites running the e-commerce platform Magento appear to have been infected with code that directs victims to the Neutrino exploit kit. It's not exactly clear how the Magento sites were infected, wrote Denis Sinegubko, a senior malware researcher with Sucuri, a Delware-based security company. . "At this point, we can suspect that it was some vulnerability in Magento or one of the third-party extensions that allowed it to infect thousands of sites within a short time," he wrote. . Spectral agents can infiltrate loopholes in Magento platforms, leading to focused malware attacks on numerous online sites.. Magento Security, Neutrino Kit, E-commerce Protection, Malware Exploits, Website Vulnerabilities. . LinuxSecurity.com Team
Mar 14, 2017
•
Hacks/Cracks
83
malwarecyber crimenetwork threatTrustwave Research: Rig Exploit Kit Affects Close to 1 Million Victims
LAS VEGAS . Researchers at Trustwave said in advance of this week The link for this article located at ThreatPost is no longer available. . Trustwave's cybersecurity experts emphasize the rising risk of the Rig Exploit Kit, potentially impacting 1 million people and raising major concerns about its effects. Rig Exploit Kit, Cyber Crime, Online Threats, Malware. . LinuxSecurity.com Team
Aug 04, 2015
•
Hacks/Cracks
83
IT securitycyber threatexploit kitNew Cyber Threats Rising Following Arrest of Blackhole Hacker
Security researchers Tuesday said reports of the arrest of the hacker behind Blackhole, one of the most widely used exploit kits on the Internet, is good news for IT operations and users. But it shouldn't be long before another hacker takes his place.. "[It's] is a big deal," said Mikko Hypponen, chief research officer at security firm F-Secure. "According to our statistics, Paunch has been the biggest provider of exploit packs for the past two years." The link for this article located at Network World is no longer available. . '[It's] is a big deal,' said Mikko Hypponen, chief research officer at security firm F-Secure. 'Acco. security, researchers, tuesday, reports, arrest, hacker, behind, blackhole. . LinuxSecurity.com Team
Oct 09, 2013
•
Hacks/Cracks
83
malwareapache modulecyberattackEvil Apache Module Facilitates Banking Trojan Attacks on Users
A malicious Apache module found operating in the wild turns sites running the Internet's most popular Web server into platforms that surreptitiously install malware on visitors' computers.. The plugin, which was discovered by researchers from antivirus provider Eset, is an x64 Linux binary that streamlines the process of injecting malicious content into compromised websites. It was found running on an undisclosed website that exposed end users to a variety of exploits that installed the ZeuS banking trojan, also known as Win32/Zbot. It also pushed malware from Sweet Orange, a newer exploit kit hosted by servers in Lithuania that competes with ZeuS. When Eset discovered the plugin last month, it was connecting to command and control servers in Germany and was being used to target banking customers in Russia and elsewhere in Europe.. The plugin, which was discovered by researchers from antivirus provider Eset, is an x64 Linux binary. malicious, apache, module, found, operating, turns, sites, running, internet's, popula. . LinuxSecurity.com Team
Dec 21, 2012
•
Hacks/Cracks
79
cyber threatsexploit kitmalware tacticsExploit Kit BlackHole 2.0 Unleashes New Browser Exploit Techniques
A new version of the BlackHole exploit kit is now out on the web and ready to start infecting. The developer of the toolkit, who goes by the handle "Paunch," recently announced the availability of Blackhole 2.0, which removes much of its trove of known and patched exploits, and replaces them with a whole new crop. BlackHole is a widely-used, web-based software package which includes a collection of tools to take advantage of security holes in web browsers to download viruses, botnet trojans, and other forms of nastiness to the computers of unsuspecting victims. The exploit kit is offered both as a "licensed" software product for the intrepid malware server operator and as malware-as-a-service by the author off his own server.. ZeroPoint 3.1 is an online toolkit designed to leverage unpatched flaws in web browsers, enabling cybercriminals to compromise systems and spread malware.. BlackHole Toolkit, Malware Tactics, Cybersecurity Threats, Exploit Alternatives, Web Exploits. . LinuxSecurity.com Team
Sep 13, 2012
•
Security Projects
83
exploit kitcybersecurity threatmalware distributionDNS Hijacking Attacks Using Black Hole Exploit Kit Target Websites
Attackers have been going after various pieces of the DNS infrastructure for a long time now, and it's not unusual for there to be somewhat organized campaigns that target certain vertical industries or geographic regions. But researchers lately have been seeing an interesting pattern of compromises in which attackers somehow add new names to existing domains and use those sub-domains to piggyback on the good reputation of the sites and push counterfeit goods, pills and other junk. . And now they're using the attack to push exploits via the Black Hole Exploit Kit. The attacks have been ongoing for at least a couple of months and while they're fairly simple in theory, researchers haven't necessarily been able to figure out how the attackers have managed to compromise the domains and get access to the DNS records to add their own sub-domains. What's happened is that attackers have been able to alter the domain records of dozens of existing, legitimate sites, including local government agencies, small businesses, community banks and others and then inserted new sub-domain names into the records. The link for this article located at ThreatPost is no longer available. . And now they're using the attack to push exploits via the Black Hole Exploit Kit. The attacks have b. attackers, going, various, pieces, infrastructure. . LinuxSecurity.com Team
Dec 14, 2011
•
Hacks/Cracks
83
security advisorywebsite breachexploit kitGeek.com Advisory: Malware Injection Via Exploit Kit Attack
Geek.com, one of the Web's most popular technology sites, has been hacked and is serving malware to visitors, security researchers at Zscaler said yesterday.. "It has come to our attention that many different pages [on Geek.com] -- like the main homepage and about us page -- are infected with malicious Iframes pointing to different malicious sites," Zscaler said in a blog. According to the blog, hackers injected a malicious HTML Iframe or script tag into the legitimate pages on the site. The link for this article located at Dark Reading is no longer available. . Cybercriminals infiltrated multiple sections on TechCrunch.com, embedding harmful software and deceptive Iframes, affecting users who browsed the site.. Geek.com Hack, Malware Injection, Exploit Attack, Website Security Breach. . LinuxSecurity.com Team
May 17, 2011
•
Hacks/Cracks
83
malwarecybercrimesecurity threatExploit Kits Facilitate Cybercrime and Threaten Security
Once upon a time, only computer geeks were smart enough to be cyber-criminals. Now, anyone with enough cash can become one. WebAttacker, CrimePack, IcePack and dozens of other do-it-yourself crime kits are available online for less than $1,000. . Some malicious software programs -- security researchers call them "exploit kits" or "attack toolkits" -- may cost as little as $100. These applications allow even amateur hackers to steal passwords, financial information, and use their victims' computers to send spam, such as the bothersome "Canadian Pharmacy" program. The hacker becomes a bot herder, controlling infected PCs like robots, with the freedom to install spyware and earn cash for the unsolicited messages they send. An April report by M86 Security Labs finds that Russia is a major source of exploit kits, and the U.S. is a favorite target. They report one web site offers $170 for every 1000 computers infected. Although security experts insist on the necessity of an up-to-date anti-virus program, it is not enough protection. The link for this article located at WTOP FM is no longer available. . Malicious software packages empower novice cybercriminals to extract data and manipulate compromised computers, escalating the dangers of online fraud.. Exploit Kit, Cybercrime Threat, Attack Toolkit, Malware Control, Bot Herding Threats. . LinuxSecurity.com Team
May 05, 2010
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!