Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
74
network securityintrusion preventionsecurity strategiesChallenges in Network Security: Defense Strategies Against Intrusions
Day and night, the war of attrition rages in the beleaguered world of network security. Defenders throw up firewalls, download patches, and scramble to fend off the hundreds of thousands of attempted intrusions into worldwide enterprise data. . . .. Day and night, the war of attrition rages in the beleaguered world of network security. Defenders throw up firewalls, download patches, and scramble to fend off the hundreds of thousands of attempted intrusions into worldwide enterprise data. The siege, a deep drain on corporate budgets, has been largely invisible to the general public and, until recently, even to the legions of employees who work outside information technology. But with the rising volume of spam, and the spread of inbox-clogging worms like MyDoom and Sobig, even noncombatants have begun to grasp some of the dimensions of the business security challenge. "You go back 10 years and there might have been a hundred viruses a year," said Randy Breault, manager of information security services for Hannaford Brothers Co. in Portland, Maine. "Now there are several hundred a month." The link for this article located at Boston.com is no longer available. . Morning and evening, the battle of endurance unfolds in the troubled realm of data protection. Guardians strive to repel breaches.. Network Protection, Cyber Defense, Intrusion Prevention, Organizational Security, Email Threats. . Anthony Pell
Feb 11, 2004
•
Network Security
74
intrusion detectioncybersecurityinternal securityFirewalls And IDS Create False Sense Of Internal Security
In an effort to boost sales and generate revenue, one U.S. multinational energy company recently embraced the Internet to bolster external communication and internal collaboration. In addition to creating a corporate web site, the firm deployed hundreds of intranet applications for . . . . In an effort to boost sales and generate revenue, one U.S. multinational energy company recently embraced the Internet to bolster external communication and internal collaboration. In addition to creating a corporate web site, the firm deployed hundreds of intranet applications for procurement, expense reporting and other processes. Numerous departments and branch offices worldwide also set up specialized web sites for partners, customers and even project management. Though the company has achieved its strategic goals for the web, by leveraging valuable communication and management tools that lower costs and streamline processes, it has, unwittingly, set itself up for malicious intrusion. The decentralized and ad hoc intranet application deployment has created a fragmented, multi-platform mosaic that raises important security questions (see boxout below). Clearly for internal or external web applications, security is the biggest concern today. The dramatic number of attacks is expected by CERT to double again this year to almost 100,000. It is estimated by Gartner Group that as many as 70 to 80 percent of these attacks are coming in through ports 80 and 443, commonly used by web applications. Such attacks can be costly and detrimental to corporate credibility. Privileged customer, financial and operational information or valuable intellectual property can be damaged or stolen during the average hacker intrusion of 15 minutes or less. The average loss is more than $2 million among those willing to quantify losses, according to an FBI/CSI survey. Downtime alone can potentially cost tens of thousands of dollars per minute. "There is much more illegal and unauthorized activity going on in cyberspace than corporations admit totheir clients, stockholders and business partners or report to law enforcement. Incidents are widespread, costly and commonplace," the survey concluded. The link for this article located at SCMagazine is no longer available. . Explores how firewalls and intrusion detection systems (IDS) can foster a false sense of security in organizations, despite the growing cyber threat landscape. Network Security,Cyber Threats,Intrusion Detection,Internal Security. . Anthony Pell
Aug 29, 2002
•
Network Security
72
VPNinvestmentfirewallsFirewalls And VPN Investment Surge Driven By Cyberterrorism Awareness
End-user investment in firewalls and virtual private networks (VPNs) will lead to the security market growing to $18.9bn worldwide by 2005, according to a report by analyst Datamonitor. Awareness of cyberterrorism has forced companies to focus on the effectiveness of their . . . . End-user investment in firewalls and virtual private networks (VPNs) will lead to the security market growing to $18.9bn worldwide by 2005, according to a report by analyst Datamonitor. Awareness of cyberterrorism has forced companies to focus on the effectiveness of their security. The report, Global Network Security Markets: An Evolving Market, predicts major IT security investment next year with Europe, Middle East and Africa accounting for $6.2bn. The report says user expenditure on firewalls and VPNs will rise from just over $2bn last year to $7.5bn by 2005, through vendors such as Check Point, Cisco and ISS. "The biggest driver for VPN solutions is by far the savings that companies can make relative to their expenditure on dedicated circuits," said Ian Williams, e-security analyst at Datamonitor. The link for this article located at VNUNet is no longer available. . Rising concern over data breaches drives consumer spending on encryption tools and antivirus software to $22.4bn by 2024. firewalls, VPN, security market, IT investment, cyber threats. . Anthony Pell
Jun 14, 2002
•
Firewalls
74
data protectionencryptionauthenticationEnhanced Data Protection Through Advanced Network Defense Techniques
These days, the outlook for enterprise networks with a mission to safeguard corporate data is getting brighter. Weapons such as firewalls; VPNs; and increasingly sophisticated authentication, authorization, and encryption techniques (and more resistant public and private keys) are becoming more widely . . . . These days, the outlook for enterprise networks with a mission to safeguard corporate data is getting brighter. Weapons such as firewalls; VPNs; and increasingly sophisticated authentication, authorization, and encryption techniques (and more resistant public and private keys) are becoming more widely available to organizations of all sizes. For example, instead of relying solely on a single, centralized firewall, companies can more easily expand their perimeters via desktop or personal firewalls. And those who are outsourcing this function should take it upon themselves to closely scrutinize what lies in their service provider's arsenal. The same holds true for VPNs. While some organizations have the resources and manpower to handle these in-house, many are turning to alliances with service providers to help secure this perimeter. But first, it's crucial to determine whether your service provider can supply the type of VPN you need, how quickly they can provide it, and, in the case of "New Age" providers, whether they'll be able to stay in the battle for the long haul. The link for this article located at Network Magazine is no longer available. . Explore how enterprises are enhancing their cybersecurity measures through innovative strategies and solutions for safeguarding information.. Enterprise Network Security, Secure VPNs, Authentication Methods, Data Protection, Encryption Strategies. . Anthony Pell
Jun 06, 2001
•
Network Security
76
intrusion detectionfirewallstraining eventSANS Security DC2000 Technical Training Event for Cybersecurity Pros
SANS Security DC2000 will be here July 5-10th, 2000. It is located at the JW Marriot Hotel in Washington DC. SANS will provide "In-depth training for people interested in developing skills and confidence as technical security professionals." . . .. SANS Security DC2000 will be here July 5-10th, 2000. It is located at the JW Marriot Hotel in Washington DC. SANS will provide "In-depth training for people interested in developing skills and confidence as technical security professionals." The training includes security essentials, intrusion detection, firewalls, and Linux security. The link for this article located at SANS is no longer available. . SANS Cybersecurity Workshop 2025 provides comprehensive education for future security experts from March 1-6, 2025.. SANS Security Training, Cybersecurity Techniques, Linux Security Essentials. . Anthony Pell
Jun 02, 2000
•
Organizations/Events
76
network securityauthenticationsecurity policyCall for Papers: Network Security Symposium on PKI and Firewalls
The Network and Distributed System Security Symposium is looking for authors for information on PKI, security policy, authentication, firewalls, and a handful of other exciting topics. . . .. The Network and Distributed System Security Symposium is looking for authors for information on PKI, security policy, authentication, firewalls, and a handful of other exciting topics. The link for this article located at NDSS is no longer available. . The Cybersecurity and Network Integrity Conference invites submissions related to encryption standards, access control mechanisms, identity verification, and intrusion detection systems.. Network Symposium, PKI, Policy Development, Authentication, Firewall Strategies. . Anthony Pell
May 16, 2000
•
Organizations/Events
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!