Explore top 10 tips to secure your open-source projects now. Read More
×
Network Security
privilege escalation open-source
privilege escalation open-source There's a gap between what Linux systems log by default and what you actually need to detect a compromise. Most environments have logging active, which creates a sense of coverage that doesn't hold up under investigation. . When you start pulling logs after an incident, what you find is fragmented activity — a login here, a process there, but no clear narrative of how access was gained, what was executed, or how far the attacker moved. You piece together a timeline rather than reading one....
Jul 12, 2026
Network Securitysecurity advisory Ubuntu
security advisory Ubuntu Root access on a Linux system rarely arrives through a zero-day. . Honestly, it usually doesn't even arrive through something you'd consider clever. More often — and this shows up in post-incident report after post-incident report — an attacker gets a low-privilege foothold through a misconfigured web app or a reused credential, and then just looks around. What they find is a sudoers entry that's been sitting untouched since the last sysadmin handed off the server. Or a SUID binary a...
Jul 10, 2026
Security Vulnerabilities open-source dependency management
open-source dependency management Every Linux developer who works with Go has run the same workflow a thousand times. You find a library that solves your problem, you see a decent star count on GitHub, and you run go get. It is frictionless and efficient. Lately, however, it is becoming one of the most effective ways for an attacker to get code running on your build servers. The recent "Operation Muck and Load" campaign is a perfect example of why this workflow is risky. Researchers uncovered over 200 GitHub repositories...
Jul 10, 2026
Security Vulnerabilities security advisory unauthorized access
security advisory unauthorized access AI coding assistants have become a staple in many Linux developers' daily workflows. Whether you're generating boilerplate, refactoring code, or updating configuration files, it's easy to assume these tools stay safely inside your project directory. . Researchers recently pulled the curtain back on a threat they’ve dubbed " GhostApproval ." It’s a direct hit to the way we use tools like Cursor, Amazon Q, and Claude Code. They found these assistants have a dangerous blind spot: they can be...
Jul 09, 2026
Network Securitynetwork security firewall management
network security firewall management Linux runs a huge portion of today's infrastructure because it gives administrators an unusual amount of control over the system. That control extends to networking, where almost every aspect of packet flow, routing, filtering, and interface behavior can be customized. The trade-off is that very little of that hardening happens automatically. A fresh installation is usually built to communicate, not to isolate. . As environments grow, servers start exchanging data with monitoring platforms,...
Jul 08, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Loading...
Explore Latest Linux Security news
We found -4 articles for you...
83
web defacementcyber incidentsecurity implicationsMitnick Defacement Incident: Security Lessons from the Attack
Do you want to know how Mitnick got defaced? The true story behind the hack. To deface Mitnick's site it was enough to go on your windows desktop, create a new webfolder and name it with . .. Do you want to know how Mitnick got defaced? The true story behind the hack. To deface Mitnick's site it was enough to go on your windows desktop, create a new webfolder and name it with . On January 30th 2003, hacker BugBear defaced Mitnick's website at DefensiveThinking: zone-h We at Zone-H dug a little bit and discovered how the site was defaced. The attacker simply took advantage from the fact that DefensiveThinking administrator forgot to set up the policies for Frontpage extensions. To deface Mitnick's site it was enough to go on your windows desktop, create a new webfolder and name it with The lack of security set to Frontpage allowed the attacker to view the entire DefensiveThinking websystem as a folder of the attacker windows computer. To deface the webpage it was enough to create an HTML file with the defacement message and drag&drop it into the newly created webfolder. As simple as told. This configuration mistake allowed the attacker to view, browse, read all the files in DefensiveThinking's web structure. When Mitnick, interrogated by friends at The Register stated: "The compromised computer is a public system on a network separate from production systems at Defensive Thinking. No customer information was released nor was in danger of being compromised", we really hope it went in that way. More on the Permissions Problems with FrontPage Extensions at . The link for this article located at zone-h.org is no longer available. . Do you want to know how Mitnick got defaced? The true story behind the hack. To deface Mitnick's sit. mitnick, defaced, story, behind, deface, mitnick's. . LinuxSecurity.com Team
Feb 11, 2003
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!