Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
78
security advisoryRed Hat Enterprise LinuxSELinuxRed Hat: EAL 4+ Certification For Cloud Secure Deployment
Red Hat Enterprise Linux 6, including the KVM hypervisor, has been awarded a major security certification used by IT in government, financial and other mission-critical verticals. By receiving the Common Criteria Certification at Evaluation Assurance Level (EAL) 4+, which is the highest level of assurance for an unmodified commercial operating system, Red Hat can assure public sector customers looking at cloud and virtualization will meet a range of important security assurance requirements.. Notably, Red Hat Enterprise Linux 6 features Security-Enhanced Linux (SELinux), a joint project developed with the National Security Agency (NSA). The certification provides assurance that using Red Hat Enterprise Linux 6 with the KVM hypervisor allows providers to host many tenants on the same machine while keeping their virtual guests separated from each other using Mandatory Access Control technology developed by the NSA, according to Paul Smith, Red Hat. Notably, Red Hat Enterprise Linux 6 features Security-Enhanced Linux (SELinux), a joint project deve. enterprise, linux, hypervisor, awarded, major, security, certific. . LinuxSecurity.com Team
Nov 20, 2012
•
Vendors/Products
78
security advisoryapplication securitygovernment complianceMicrosoft Argues Google Misleads on Security of Government Apps
Microsoft today continued its cat fight with Google, calling out the company for apparently misleading customers about the security of its applications. The software giant alleges that Google Apps for Government doesn't meet the level of security that Google claims. . In a blog post, Microsoft's corporate vice president and deputy general counsel, David Howard, said that Google's Web-based productivity suite for government clients is not certified under the Federal Information Security Management Act. The link for this article located at CNET is no longer available. . Apple challenges Samsung over deceptive assertions regarding privacy protections for user data.. Microsoft Applications, Google Security, Government Compliance. . LinuxSecurity.com Team
Apr 12, 2011
•
Vendors/Products
78
Red Hatbusiness strategysecurity certificationRed Hat's Move for JBoss Certification Under Common Criteria
In the world of security certifications, the Common Criteria is one of the strongest ways that a company can look to gain business from Government agencies. It acts as a great way to gain international business as well. And as of Thursday, the Red Hat announced that they will be seeking the same certification (but different level) for their Java software, JBOSS. What are you thoughts on the effectiveness of Common Criteria certifications on actual security, versus as a business and marketing tool? . The link for this article located at CNET.com is no longer available. . The link for this article located at CNET.com is no longer available.. world, security, certifications, common, criteria, strongest. . LinuxSecurity.com Team
Nov 07, 2007
•
Vendors/Products
82
security advisorydata protectionencryptionU.S. Government Security Compliance: Encryption and 2FA for Agencies
The Bush Administration is giving federal civilian agencies just 45 days to comply with new recommendations for laptop encryption and two-factor authentication. The memo follows a wave of high profile data thefts and major security breeches involving remote access or the theft of government laptop computers containing sensitive personal information. The official memo (PDF) from the executive office of the U.S. president stipulates that all mobile devices containing sensitive information must have their data encrypted. . The recommendations also say that two-factor authentication must be used for remote access, that remote access must time out after 30 minutes of inactivity, and that all data extracts must be logged. The memo does not detail any specific technology recommendations beyond this broad outline, presumably leaving agencies to decide on their own specific implementations. "Most departments and agencies have these measures already in place," wrote Clay Johnson III, the Deputy Director for Management who authored the memo. That's an assertion that is hard to believe in the wake of some high profile data thefts in the past year involving government systems that were not using any encryption or two-factor authentication. The link for this article located at is no longer available. . The recommendations also say that two-factor authentication must be used for remote access, that rem. administration, giving, federal, civilian, agencies, comply, recommen. . Brittany Day
Jun 29, 2006
•
Government
78
security advisoryenterprise servergovernment complianceSuSE Linux Enterprise Server 9 EAL 4+ Certification Approved for Use
IBM and Novell announced at LinuxWorld today that SuSE Linux Enterprise Server 9 has become the first distribution to complete Evaluation Assurance Level (EAL) 4+. The high security rating will enable the operating system to be adopted by governments and government agencies for mission-critical operations, according to the firms. . In addition, IBM and Novell co-operatively achieved US Department of Defense Common Operating Environment compliance, a Defense Information Systems Agency requirement for military computing products. SuSE Linux Enterprise Server 9 on IBM eServers has achieved Controlled Access Protection Profile under the Common Criteria for Information Security Evaluation, also referred to as CAPP/EAL4+. The link for this article located at VNUNet is no longer available. . In addition, IBM and Novell co-operatively achieved US Department of Defense Common Operating Enviro. novell, announced, linuxworld, today, linux, enterprise, server, become. . LinuxSecurity.com Team
Feb 18, 2005
•
Vendors/Products
78
security advisoryRed HatSuSEHP: Certified Linux EAL 3 For Government Security Compliance
Hewlett Packard Co has completed the certification of Linux on its servers and workstations with evaluation assurance level 3 of the Common Criteria security evaluation and is now looking to the next level. . . .. 11 Oct 2004, 09:35 GMT - The certification is an important security consideration for North American and European government agencies and departments and puts Palo Alto, California-based HP's hardware running Linux on the same level as rival IBM Corp. HP has certified both Red Hat Inc Enterprise Linux and Novell Inc's SuSE Linux running on its ProLiant and Itanium systems at evaluation assurance level (EAL) 3 with Controlled Access Protection Profile (CAPP). IBM achieved the same with Red Hat in August and SuSE in January. The link for this article located at Computer Business Online is no longer available. . HP's Unix accreditation under Common Criteria tier 3 enhances its protection for public sectors across North America and Europe.. HP Linux Certification, Government Security Compliance, EAL 3 Standards. . LinuxSecurity.com Team
Oct 11, 2004
•
Vendors/Products
81
data sharingprivacy policygovernment complianceDOT Dismisses Privacy Claim Against Northwest Airlines Case
The U.S. Department of Transportation has dismissed a claim filed against Northwest Airlines that accused the carrier of violating its own privacy policy when it gave government officials passenger . . .. The U.S. Department of Transportation has dismissed a claim filed against Northwest Airlines that accused the carrier of violating its own privacy policy when it gave government officials passenger information related to the Sept. 11 attacks. The department ruled late last week that Northwest's privacy policy, which was published on the airline's Web site, does not preclude the company from sharing data with the federal government, specifically when asked to do so. In fact, the department found that Northwest, which is based in Eagan, Minn., is required by law to make records, including passenger data, available to federal agencies "upon demand," according to a statement. The complaint, filed by consumer privacy watchdog Electronic Privacy Information Center (EPIC), which is based in Washington, D.C., and the Minnesota Civil Liberties Union, contended that Northwest engaged in unfair and deceptive practices when it shared passenger name and record data with the National Aeronautics and Space Administration. The Ames Research Center at NASA had sought the information in the months following Sept. 11 to aid in its efforts to make air travel safer, according to the Transportation Department. . The U.S. Department of Transportation has dismissed a claim filed against Northwest Airlines that ac. department, transportation, dismissed, claim, filed, against, northwest, airlines. . LinuxSecurity.com Team
Sep 16, 2004
•
Privacy
78
security certificationCommon Criteriagovernment complianceSuSE Linux Enterprise Server Secures EAL2 Certification for Military Use
SuSE and IBM have achieved a crucial security certification that will let the US government and military choose the operating system.. . .. SuSE and IBM have achieved a crucial security certification that will let the US government and military choose the operating system. Linux seller SuSE and server maker IBM have obtained a crucial security certification that will make the operating system an option for demanding military and government customers, the companies are expected to announce on Tuesday. Many governments require certification to the international Common Criteria standard before they're allowed to purchase a specific computing product. SuSE Linux Enterprise Server 8 running on IBM's Intel-based xSeries servers achieved Evaluation Assurance Level 2 (EAL2) of the Common Criteria, the companies are expected to announce at the LinuxWorld Conference and Expo. The link for this article located at ZDNet UK is no longer available. . SuSE and IBM have achieved a crucial security certification that will let the US government and mili. achieved, crucial, security, certification, government. . LinuxSecurity.com Team
Dec 03, 2003
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!