Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
email security Linux server
email security Linux server You've probably trained your team to look for red flags. Odd sender names, urgent language, mismatched links. But a well-crafted spoofed email won't trip any of those wires. It looks legitimate, sounds legitimate, and often comes from a domain that passes every automated check you throw at it. . Attackers know exactly how humans scan an inbox. They design around it. This guide walks you through the techniques attackers use to slip a spoofed email past both your filters and your users and what...
Jul 25, 2026
Security Vulnerabilities cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
67
data protectionencryptionsecurity risksExploring Encryption Risks: Government-Mandated Backdoor Access Concerns
Monday a group of cryptographers and security experts released a major paper outlining the risks of government-mandated back-doors in encryption products: Keys Under Doormats: Mandating insecurity by requiring government access to all data and communications, by Hal Abelson, Ross Anderson, Steve Bellovin, Josh Behaloh, Matt Blaze, Whitfield Diffie, John Gilmore, Matthew Green, Susan Landau, Peter Neumann, Ron Rivest, Jeff Schiller, Bruce Schneier, Michael Specter, and Danny Weitzner.. Abstract: Twenty years ago, law enforcement organizations lobbied to require data and communication services to engineer their products to guarantee law enforcement access to all data. After lengthy debate and vigorous predictions of enforcement channels going dark, these attempts to regulate the emerging Internet were abandoned. In the intervening years, innovation on the Internet flourished, and law enforcement agencies found new and more effective means of accessing vastly larger quantities of data. The link for this article located at Schneier on Security is no longer available. . Government-mandated back doors in encryption jeopardize data security and privacy, increasing risks of exploitation by malicious actors and eroding trust.. encryption risks,data security,backdoor access,cryptography concerns,security measures. . LinuxSecurity.com Team
Jul 09, 2015
•
Cryptography
82
hacking toolslegal implicationsdual-useLegality Of Dual-Use Hacking Tools And Government Regulations
What if everyone one day took everything that "could" be used "maliciously" and with "evil intent" (even though there are many benefits to these things) and just deemed them illegal right off the bat? A hacksaw could be used to cause bodily harm (in horror movies mostly), yet it's a valuable tool for carpenters - why should there be an evaluation on its intent? In the following article, see how the government may be deeming "dual use" security tools illegal before they are even used - authors of these tools may be prosecuted if they intended the tool to be used illegally. . They revised their proposals a bit The link for this article located at Light Blue Touchpaper is no longer available. . They revised their proposals a bit The link for this article located at Light Blue Touchpaper is no . everyone, everything, 'could', 'maliciously', 'evil, intent'. . Brittany Day
Jun 20, 2007
•
Government
82
information securitypublic sectorcriminal lawImpact of U.S. Information Security Laws on Public Sector Professionals
This is the third part of a four-part series looking at U.S. information security laws and the way those laws affect security professionals. This installment begins the discussion of information security in the public sector. Government's involvement with information security takes . . . . This is the third part of a four-part series looking at U.S. information security laws and the way those laws affect security professionals. This installment begins the discussion of information security in the public sector. Government's involvement with information security takes place in two unique contexts: criminal justice and national defense. (Of course, government agencies also have information security concerns that are analogous to those of private industry, which were considered in the first two articles in this series.) In this installment, we will look at the basics of the criminal information security law. As we discussed in the first article in this series, the Computer Fraud and Abuse Act, 18 U.S.C.§ 1030 (the "CFAA") is the primary computer crime statute in the United States. The CFAA imposes criminal liability [1] for: The link for this article located at SecurityFocus is no longer available. . U.S. information security laws have transformed operations for public sector and criminal justice professionals, focusing on data confidentiality amid increasing cyber threats. Information Security, U.S. Laws, Public Sector Security, Criminal Justice Oversight. . Anthony Pell
May 13, 2003
•
Government
82
government regulationssurveillance lawintelligence gatheringSenate Expands Wiretap Authority For Foreign Agents Without Terror Links
The Senate easily passed a measure Thursday expanding a powerful surveillance law, used in spy and terrorism investigations, to allow U.S. agents to wiretap lone foreigners who can't be linked to a terror organization or government. Currently, U.S. law enforcement . . . . The Senate easily passed a measure Thursday expanding a powerful surveillance law, used in spy and terrorism investigations, to allow U.S. agents to wiretap lone foreigners who can't be linked to a terror organization or government. Currently, U.S. law enforcement officers can get warrants authorizing intelligence-gathering wiretaps from a secret court, but only if they can establish a reasonable belief the target is an "agent of a foreign power" or group. The bill, which passed 90 to 4, would amend the 1978 Foreign Intelligence Surveillance Act to remove that requirement. As used in the act, the term "agent of a foreign power" includes those controlled by governments, political organizations or terrorist groups. But lawmakers feared that this requirement could hinder the FBI when its investigators can't make such a link to a known terror organization or a foreign government. The link for this article located at SecurityFocus is no longer available. . The House expanded a critical privacy measure, simplifying monitoring protocols for overseas individuals lacking ties to terrorism.. wiretap authority, Foreign Intelligence Surveillance Act, surveillance legislation. . Anthony Pell
May 12, 2003
•
Government
81
government regulationsanti-terrorismsurveillance lawMATA: New Surveillance And Immigration Policies Post-Attacks
Created in response to last week's bloody attacks, the draft "Mobilization Against Terrorism Act" (MATA) rewrites laws dealing with wiretapping, eavesdropping and immigration. The draft, intended to increase prosecutors' courtroom authority, also unleashes the government's Echelon and Carnivore spy systems. President . . . . Created in response to last week's bloody attacks, the draft "Mobilization Against Terrorism Act" (MATA) rewrites laws dealing with wiretapping, eavesdropping and immigration. The draft, intended to increase prosecutors' courtroom authority, also unleashes the government's Echelon and Carnivore spy systems. President Bush sent his anti-terrorism bill to Congress late Wednesday, launching an emotional debate that will force U.S. politicians to choose between continued freedom for Americans or greater security. The link for this article located at Wired is no longer available. . Created in response to last week's bloody attacks, the draft 'Mobilization Against Terrorism Act' (M. created, response, week's, bloody, attacks, draft, 'mobilization, against, terrorism. . LinuxSecurity.com Team
Sep 20, 2001
•
Privacy
82
cybersecurity initiativecomputer securityfederal agenciesU.S. House Passes Computer Security Enhancement Act for Federal Agencies
The House of Representatives quietly approved legislation designed to bolster computer security at civilian federal agencies. By voice vote, the House passed the Computer Security Enhancement Act, which was introduced in 1999 by House Science Committee Chairman James Sensenbrenner, R-Wis., in . . . . The House of Representatives quietly approved legislation designed to bolster computer security at civilian federal agencies. By voice vote, the House passed the Computer Security Enhancement Act, which was introduced in 1999 by House Science Committee Chairman James Sensenbrenner, R-Wis., in response to growing concerns about hacker attacks on federal agencies. Among other things, H.R. 2413 would require the National Institute of Science and Technology to serve as a computer security consultant for other federal civilian agencies. In that role, NIST would advise agencies on what "off-the-shelf" computer security products met with the government's approval. The link for this article located at Computer User is no longer available. . Congress approved a bill aimed at enhancing cybersecurity across government departments, strengthening safeguards against digital attacks.. Federal Regulation, Computer Security Act, Cybersecurity Initiative, Federal Agencies. . Anthony Pell
Oct 30, 2000
•
Government
82
privacy rightsgovernment regulationstelecommunicationAnalyzing Government Regulations on Telecommunications and Privacy Rights
Oscar S. Cisneros writes: "A new government-approved standard for telecommunications equipment violates the Fourth Amendment's prohibition against unreasonable searches and seizures, critics say. The standard, released in updated form last week by the Telecommunication Industry Association, instructs telecommunications hardware manufacturers on . . . . Oscar S. Cisneros writes: "A new government-approved standard for telecommunications equipment violates the Fourth Amendment's prohibition against unreasonable searches and seizures, critics say. The standard, released in updated form last week by the Telecommunication Industry Association, instructs telecommunications hardware manufacturers on how to build their equipment so that it complies with a federal wiretap law passed by Congress in 1994." In today's day and age where we are all prone to our traffic being sniffed an issue like this should be important to all of us. The link for this article located at Wired News is no longer available. . Oscar S. Cisneros writes: 'A new government-approved standard for telecommunications equipment viola. oscar, cisneros, writes, government-approved, standard, telecommunications, equipment, viola. . Anthony Pell
Aug 14, 2000
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!