Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 18 articles for you...
82
security advisorycritical issueexploitCentOS Control Web Panel Critical Issue: Patch Required by February 7
The US government’s cybersecurity agency CISA is giving federal agencies an early February deadline to patch a critical -- and already exploited -- security vulnerability in the widely used CentOS Control Web Panel utility. . The agency added the CVE-2022-44877 flaw to its KEV (Known Exploited Vulnerabilities) catalog and set a February 7th deadline for federal agencies to test and deploy an available fix. Security researchers warned earlier this month that the publication of proof-of-concept code and a YouTube video demonstration would lead to live attacks. Soon after, threat-hunting outfits GreyNoise and Shadowserver spotted signs of exploitation in the wild. . CISA includes a critical vulnerability in CentOS Control Web Panel on its urgent patch list, requiring federal entities to rectify exploitation risks by February 7.. CentOS Patch, Control Web Panel Flaw, Cybersecurity Updates. . Brittany Day
Jan 19, 2023
•
Government
76
security discussionsoftware securitycollaborationWhite House Summit: Addressing Log4j Security Issues With Tech Giants
Tech giants and federal agencies meet at the White House to discuss open-source software security, a response to the widespread Log4j vulnerability that’s worrying industry and cyber leaders. . Among the attendees are companies like Apple, Facebook and Google, as well as the Apache Software Foundation, which builds Log4j , a ubiquitous open-source logging framework for websites. “Building on the Log4j incident, the objective of this meeting is to facilitate an important discussion to improve the security of open source software — and to brainstorm how new collaboration could rapidly drive improvements,” a senior administration official said in advance of the meeting. . Top executives convene at the Pentagon to tackle the urgent privacy risks triggered by the new software vulnerabilities.. Open Source Security, Log4j Vulnerability, Tech Summit, Software Collaboration, Cybersecurity Initiatives. . Brittany Day
Jan 14, 2022
•
Organizations/Events
82
federal agenciescybersecurity challengespolicy changesUS Government Cybersecurity Struggles Amid White House Role Reductions
Amid a report today that the Trump White House plans to cut the administration's cybersecurity coordinator position altogether, new data shows how US federal government agencies continue to struggle to close security holes in their software.. Politico reported that the administration has eliminated the White House cybersecurity position, which was recently vacated by former head Rob Joyce, who has returned to the National Security Agency. Politico said it had obtained an email to the White House National Security Council staff from John Bolton aide Christine Samuelian: "The role of cyber coordinator will end," in an effort to "streamline authority" in the NSC, which includes two senior cybersecurity directors, she said in the email, according to Politico. The link for this article located at DarkReading is no longer available. . Politico reported that the administration has eliminated the White House cybersecurity position, whi. report, today, trump, white, house, plans, administration's, cybersecurity, coord. . Brittany Day
May 16, 2018
•
Government
82
cyber threatsuser dataprivacy risksCISA Data Sharing Act: Risks to User Privacy in Cybersecurity
A controversial draft law, which one senator called a "surveillance bill by another name," has passed the Senate. CISA, the Cybersecurity Information Sharing Act (S. 754), will allow private companies to share cyber-threat data with the federal government, including personal user data, in an effort to prevent cyberattacks, such as those on the scale of Target, Home Depot, and Sony. . Companies that share data with federal agencies, including the National Security Agency (NSA), will be given legal and liability protections from lawsuits relating to data sharing. . Companies that share data with federal agencies, including the National Security Agency (NSA), will . controversial, draft, which, senator, called, 'surveillance, another, passe. . Alex
Mar 14, 2017
•
Government
76
security risksprivacy concernsfederal agenciesDefcon 2023 Calls For Federal Agencies To Sit Out Due To Privacy Concerns
Since its founding in 1992, Defcon has been a venue where anarchists, geeks, and employees of three-letter federal agencies became unlikely comrades under a live-and-let-live credo that placed the love of computer tinkering above almost everything else. . No more. As tensions mount over the broad and indiscriminate spying of Americans and foreigners by the National Security Agency, Defcon organizers are asking feds to sit out this year's hacker conference. "For over two decades DEF CON has been an open nexus of hacker culture, a place where seasoned pros, hackers, academics, and feds can meet, share ideas and party on neutral territory," Jeff Moss, aka The Dark Tangent, wrote in a blog post published Wednesday night. "Our community operates in the spirit of openness, verified trust, and mutual respect.". In light of increasing concerns regarding civil liberties and monitoring, Defcon's planning committee urges federal law enforcement to refrain from attending this year's convention.. Defcon Conference, Hacker Culture, Federal Agencies. . Dave Wreski
Jul 11, 2013
•
Organizations/Events
77
cyber attacksecurity compliancefederal agenciesStudy Reveals DNS Security Failures in U.S. Federal Websites
Half of U.S. government Web sites are vulnerable to commonplace DNS attacks because they haven't deployed a new authentication mechanism that was mandated in 2008, a new study shows.. The Office of Management and Budget (OMB) issued a mandate requiring federal agencies to deploy an extra layer of security The link for this article located at Network World is no longer available. . National bodies struggle with DNS protection as legacy verification techniques prevail, heightening vulnerability to cyber threats.. DNS Security, Federal Agencies, Cyber Attacks, Outdated Security, Website Security. . LinuxSecurity.com Team
Jan 27, 2011
•
Server Security
82
network protectiondns securitysecurity challengesFederal Agencies Boost DNS Security Amid Implementation Challenges
In 2008, the Office of Management and Budget directed federal agencies to improve their domain name server (DNS) security by implementing DNS security extensions (DNSSEC), but 15 months later, many are still struggling to get there. The good news is that since OMB's December 2009 deadline passed, agencies are starting to catch up, taking advantage of both products and services coming on the market to make it easier to apply DNSSEC.. Agencies were "caught with their guard down because they were unprepared to deal with it," said Branko Miskov, director of product management at DNS appliance maker BlueCat Networks, which is working with several agencies on DNSSEC deployments. "We've made pretty good progress, especially from December until now," said Derek McUmber, chief executive officer of Data Mountain Solutions Inc., a subcontractor to the General Services Administration, which supports agencies in implementing DNSSEC. About a third of federal agencies now have digitally signed their dot.gov sub-domains, he said, up from only 20% six months ago. The link for this article located at Search Security is no longer available. . Government bodies are enhancing internet safety through DNSSEC deployment following early challenges resulting from insufficient readiness.. DNS Security,DNS Implementation,Federal Agencies,Network Protection. . Anthony Pell
Jun 01, 2010
•
Government
67
key managementfederal agencieshigh-speed encryptionSwift Data Protection Leveraging Itanium Framework for Government Entities
Linux kernel maintainer Linus Torvalds has charged that Itanium designers "threw out all the good parts of the x86." One emerging niche for Itanium, though, seems to be high-speed encryption and decryption. For instance, encryption and key management provider Eruces Inc. of Lenexa, Kan., is bullish on Itanium. Eruces devotes a large chunk of its business to federal intelligence agencies. The company's symmetric key management system encrypts documents, programs and databases, using a centralized KeyServer to generate and manage keys. . The link for this article located at GCN is no longer available. . The link for this article located at GCN is no longer available.. linux, kernel, maintainer, linus, torvalds, charged, itanium, designers, 'threw. . LinuxSecurity.com Team
Sep 12, 2006
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!