Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
email security Linux server
email security Linux server You've probably trained your team to look for red flags. Odd sender names, urgent language, mismatched links. But a well-crafted spoofed email won't trip any of those wires. It looks legitimate, sounds legitimate, and often comes from a domain that passes every automated check you throw at it. . Attackers know exactly how humans scan an inbox. They design around it. This guide walks you through the techniques attackers use to slip a spoofed email past both your filters and your users and what...
Jul 25, 2026
Security Vulnerabilities cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 11 articles for you...
82
data protectiononline securitygovernment regulationLindsey Graham's Proposal Endangers Digital Privacy Regulations
If Sen. Lindsey Graham gets his way, the federal government will launch another attack on online privacy. The South Carolina Republican will ask lawmakers to give Attorney General William Barr and the Department of Justice unchecked access to all of your messaging, file-sharing, and video-sharing tools. That is bad news for just about everyone and a nightmare for those who value digital privacy. . At first glance, Graham’s bill seems innocent enough. After all, it’s called the Eliminating Abusive and Rampant Neglect of Interactive Technologies Act, which seems, on the surface, like a perfectly agreeable proposition. It would assemble a commission to “develop recommended best practices for providers of interactive computer services regarding the prevention of online child exploitation conduct.” Doesn’t everyone want children to be protected? Well, not so fast. The commission’s “recommendations” would then go to the attorney general, who can approve or disapprove what are essentially new regulations. This means unelected officials would be granted vast power to regulate technology and invade our privacy. The link for this article located at Washington Examiner is no longer available. . Johnson's proposal introduces significant risks to digital security by bestowing broad authority to oversee tech operations.. Online Privacy, Government Regulation, Digital Rights, Data Protection, Interactive Technologies. . Brittany Day
Feb 20, 2020
•
Government
81
legislationprivacy rightsgovernment regulationSenate Proposes Temporary Halt on Federal Facial Recognition Technology
Two Democratic senators want to temporarily pause the government’s use of facial recognition technology while a commission develops regulations. . A pair of Democratic senators have introduced legislation to temporarily pause the federal government’s use and purchase of facial recognition technology until Congress passes regulations. Sens. Cory Booker (N.J.) and Jeff Merkley (Ore.) announced the move on Wednesday , reflecting a growing movement to regulate and even ban the use of facial recognition technology by law enforcement, government agencies like Customs and Border Protection and private corporations. The link for this article located at Security Today is no longer available. . Two Democratic congressional members advocate for a freeze on the federal implementation of facial recognition technology until appropriate regulations are established.. Federal Facial Recognition Regulation, Biometric Privacy Laws, Senate Bill Facial Recognition. . LinuxSecurity.com Team
Feb 19, 2020
•
Privacy
81
privacy concernsgovernment regulationfacial recognitionNew Regulation Requires Facial Recognition Scans For Cell Phones In China
The government claims that the new requirement will prevent fraud for citizens, but critics see it as the furthering of invasive surveillance measures. What are your thoughts? Learn more in an interesting Security Today article: . All new cell phone users in China must submit a facial scan to the country’s technology agency after new regulations went into effect on Sunday. The government’s Ministry of Industry and Information Technology said that the new requirement, which will not affect phone numbers already registered before Dec. 1, is meant to protect Chinese citizens’ “legitimate rights and interests in cyberspace,” according to CNN . Officials say that the regulations will prevent fraud, but critics see the measure as yet another way that Chinese officials are removing anonymity from the internet and conducting more intense surveillance of users. The link for this article located at Security Today is no longer available. . Emerging laws mandate biometric screenings for debut smartphone customers in China, sparking alarm over personal data security among residents and activists.. Facial Recognition, Cybersecurity Policy, Privacy Concerns, Surveillance Measures, Government Regulation. . LinuxSecurity.com Team
Dec 04, 2019
•
Privacy
67
encryptioncybersecurityprivacyThe Crypto Wars End: A Win for Digital Privacy and Freedom
The "crypto wars" are finally over - and we've won! On 25th May 2005, Part I of the Electronic Communications Act 2000 will be torn out of the statute book and shredded, finally removing the risk of the UK Government taking powers to seize encryption keys. . The crypto wars started in the 1970s when the US government started treating cryptographic algorithms and software as munitions and interfering with university research in cryptography. In the early 1990s, the Clinton administration tried to get industry to adopt the Clipper chip - an encryption chip for which the government had a back-door key. When this failed, they tried to introduce key escrow -a policy that all encryption systems should leave a spare key with a `trusted third party' that would hand the key over to the FBI on demand. They tried to crack down on encryption products that did not contain key escrow. When software developer Phil Zimmermann developed PGP, a free mass-market encryption product for emails and files, the US government even started to prosecute him, because someone had exported his software from the USA without government permission. In its dying days, John Major's Conservative Government proposed draconian controls in the UK too. Any provider of encryption services would have to be licensed and encryption keys would have to be placed in escrow just in case the Government wanted to read your email. New Labour opposed crypto controls in opposition, which got them a lot of support from the IT and civil liberties communities. They changed their minds, though, after they came to power in May 1997 and the US government lobbied them. However, encryption was rapidly becoming an important technology for commercial use of the Internet - and the new industry was deeply opposed to any bureaucracy which prevented them from innovating and imposed unnecessary costs. So was the banking industry, which worried about threats to payment systems from corrupt officials. In 1998, the Foundation for InformationPolicy Research was established by cryptographers, lawyers, academics and civil liberty groups, with industry support, and helped campaign for digital freedoms. The link for this article located at Politech is no longer available. . The crypto wars started in the 1970s when the US government started treating cryptographic algorithm. 'crypto, wars', finally, we've, electronic, commu. . LinuxSecurity.com Team
May 25, 2005
•
Cryptography
82
data protectioncritical infrastructuresystem securityHomeland Security Proposes New Data Protection Rules for Private Sector
The Homeland Security Department has proposed rules under which it would protect systems information it receives from the private sector. The proposed rule explicitly applies to hardware and software that makes up critical-infrastructure systems. The government relies on many such . . . . The Homeland Security Department has proposed rules under which it would protect systems information it receives from the private sector. The proposed rule explicitly applies to hardware and software that makes up critical-infrastructure systems. The government relies on many such systems, such as private voice and data networks, for its daily operations. Companies have been wary of submitting information to the department for several reasons, including the possibility that their competitors could access commercially important data. Some members of Congress and privacy advocates criticized the enacted version of the Homeland Security Act of 2002 as including excessively broad exemptions from the Freedom of Information Act for such information. The proposed rule-making notice, issued Tuesday, is aimed at implementing the Critical Infrastructure Information Act of 2002, which appears in Subtitle B of Title II of the Homeland Security Act. The link for this article located at GCN is no longer available. . The Department of Defense unveils regulations aimed at safeguarding sensitive data from commercial entities, guaranteeing information security.. Homeland Security, Data Protection, Critical Infrastructure Security. . Anthony Pell
Apr 18, 2003
•
Government
81
data protectionprivacy rightscivil libertiesUK Government's Draft Privacy Laws Raise Privacy Concerns
Plans to increase the number of organisations that can look at records of what you do online could lead to widespread abuse of personal information, warn experts. The UK Government this week unveiled a draft list of organisations that will be . . . . Plans to increase the number of organisations that can look at records of what you do online could lead to widespread abuse of personal information, warn experts. The UK Government this week unveiled a draft list of organisations that will be given the right to request information about the web, telephone and fax lives of British citizens under the controversial Regulation of Investigatory Powers Act. Civil liberty campaigners have little faith that government safeguards will be effective in policing the use of sensitive information passed to organisations not connected with law enforcement. The link for this article located at BBC is no longer available. . Efforts to broaden the availability of digital archives could jeopardize your privacy and the safety of your personal information in the United Kingdom.. UK Government, Online Privacy, Data Protection Rights. . LinuxSecurity.com Team
Jun 13, 2002
•
Privacy
82
government regulationsoftware accountabilitysoftware policyUS National Academy of Sciences Calls for Software Security Legislation
An influential body of researchers is calling on the US Government to draft laws that would punish software firms that do not do enough to make their products secure. The US National Academy of Sciences (NAS) has released drafts of a . . . . An influential body of researchers is calling on the US Government to draft laws that would punish software firms that do not do enough to make their products secure. The US National Academy of Sciences (NAS) has released drafts of a report commissioned after 11 September to look at the state of America's computer systems. If the report is acted on the subsequent laws could hurt monopolies like Microsoft, which many say does not do enough to ensure its software is secure. Almost all of the serious virus outbreaks of the last two years can be traced to vulnerabilities in Microsoft products. The link for this article located at BBC News is no longer available. . An influential body of researchers is calling on the US Government to draft laws that would punish s. influential, researchers, calling, government, draft, would, punish. . Anthony Pell
Jan 16, 2002
•
Government
82
government regulationinternational tradeexport policyU.S. Eases Export Restrictions On High-Speed Computers For Global Markets
President Bush on Wednesday allowed U.S. companies to sell high-speed computers to countries such as Russia, China and India, easing a Cold War-era ban designed to halt the spread of nuclear arms. Computer makers may now export computers capable of complex 3D modeling, fluid dynamics calculations and other advanced applications to Pakistan, Vietnam and other "Tier 3" countries without specific permission from the government.. . .. President Bush on Wednesday allowed U.S. companies to sell high-speed computers to countries such as Russia, China and India, easing a Cold War-era ban designed to halt the spread of nuclear arms. Computer makers may now export computers capable of complex 3D modeling, fluid dynamics calculations and other advanced applications to Pakistan, Vietnam and other "Tier 3" countries without specific permission from the government. The Bush administration more than doubled the processor speed limit, from 85,000 millions of theoretical operations per second (Mtops) to 195,000 Mtops. A typical U.S. home computer now sold in retail stores is capable of roughly 2,100 Mtops. But the limits on computing power come into play on more powerful workstations and servers. The link for this article located at News.com is no longer available. . President Bush on Wednesday allowed U.S. companies to sell high-speed computers to countries such as. president, wednesday, allowed, companies, high-speed, computers, countries. . Anthony Pell
Jan 02, 2002
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!