Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 9 articles for you...
83
data breachcyber attackpersonal informationAshley Madison Hack: Impact Team Publishes Compromised User Data
The group responsible for the Ashley Madison hack published the compromised records on Tuesday, delivering on the promise made when the hack was announced in July. The compromised records include account profile information, personal information, financial records, and more. . In July, a group calling themselves Impact Team leaked a selection of files that they claimed originated form Avid Life Media (ALM), the company behind adult playgrounds of Ashley Madison, Cougar Life, Established Men, and others. The link for this article located at CSO Online is no longer available. . In July, a group calling themselves Impact Team leaked a selection of files that they claimed origin. group, responsible, ashley, madison, published, compromised, records, tuesday. . LinuxSecurity.com Team
Aug 19, 2015
•
Hacks/Cracks
83
cyber crimehacktheftBitcoin Heist: Hackers Steal $12,000 From Brokerage Account
A Bitcoin transaction services company says that hackers broke into one of its brokerage accounts last week, nabbing more than $12,000 worth of the digital currency. . That attack knocked Bitinstant offline over the weekend. The company says that while it lost Bitcoins, no customers were affected by the hack. The link for this article located at Wired is no longer available. . A cryptocurrency exchange experienced a security incident, resulting in the loss of $15,000 in Ethereum from one individual wallet.. Bitcoin Heist, Digital Currency Theft, Cybersecurity Risk. . LinuxSecurity.com Team
Mar 08, 2013
•
Hacks/Cracks
83
web applicationsecurity flawSQL injectionBit9 SQL Injection: Hackers Exploit Security Flaw For Attacks
Bit9 said a common Web application vulnerability was responsible for allowing hackers to ironically use the security vendor's systems as a launch pad for attacks on other organizations. . Based in Waltham, Mass., the company sells a security platform that is designed in part to stop hackers from installing their own malicious software. In an embarrassing admission, Bit9 said earlier this month that it neglected to install its own software on a part of its network, which lead to the compromise. The link for this article located at InfoWorld is no longer available. . Based in Waltham, Mass., the company sells a security platform that is designed in part to stop hack. common, application, vulnerability, responsible, allowing, hackers, ironically. . LinuxSecurity.com Team
Feb 28, 2013
•
Hacks/Cracks
83
security advisoryhackdecryptionSony PlayStation 3 Major Hack Exposes Level 0 Security Issue
A hacker group finds a secret set of codes that can decrypt the PlayStation 3's Level 0 security layer -- the holy grail of secrecy within Sony's console.. Hackers have found a way to break down one of the toughest defensive walls in Sony's PlayStation 3 software security, ensuring that those who use custom firmware can run homebrew software and pirated games forever. The link for this article located at CNET is no longer available. . Explore the methods used by hackers to crack the security of Xbox 360, jeopardizing system reliability for unauthorized applications and cloned software.. PlayStation 3 Hack, Console Exploit, Homebrew Software, Custom Firmware. . LinuxSecurity.com Team
Oct 25, 2012
•
Hacks/Cracks
83
data breachcyberattackhackReborn LulzSec: Hack Of MilitarySingles.com Exposes 160,000 Accounts
A group of hackers claiming to be the reborn Lulz Security (LulzSec) took credit for an alleged compromise of MilitarySingles.com, a dating website for military personnel, and the leak of over 160,000 account details from its database.. The group announced the MilitarySingles.com hack on Twitter and Pastebin on Sunday, using the name "LulzSec Reborn" and ASCII art previously associated with LulzSec, the hacker group that apparently disbanded and merged with the Anonymous hacktivist collective last year. The link for this article located at PC World is no longer available. . The group known as Reborn LulzSec has taken credit for breaching MilitarySingles.com, exposing the personal information of more than 160,000 users.. MilitarySingles, Reborn LulzSec, Cyberattack, Data Breach, Account Exposure. . LinuxSecurity.com Team
Mar 27, 2012
•
Hacks/Cracks
83
data breachsecurity threatcredit card theftDigital Playground Data Breach: 73000 Users Exposed in Security Incident
Hackers claim to have stolen the details of more than 73,000 subscribers to porn site Digital Playground. . The data includes user names, email addresses and passwords. Also taken were the numbers, expiry dates and security codes for 40,000 credit cards. The attack is the second successful breach of a site run by website management company Manwin. The link for this article located at BBC News is no longer available. . Cybercriminals infiltrated Media Nexus, compromising the personal information and payment details of more than 50,000 members.. Digital Playground Breach, User Data Exposure, Credit Card Security. . LinuxSecurity.com Team
Mar 12, 2012
•
Hacks/Cracks
67
encryptionexploitattackTLS 1.0 Weakness Exposes PayPal Cookies to BEAST Attack
Researchers have discovered a serious weakness in virtually all websites protected by the secure sockets layer protocol that allows attackers to silently decrypt data that's passing between a webserver and an end-user browser.. The vulnerability resides in versions 1.0 and earlier of TLS, or transport layer security, the successor to the secure sockets layer technology that serves as the internet's foundation of trust. Although versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost entirely unsupported in browsers and websites alike, making encrypted transactions on PayPal, GMail, and just about every other website vulnerable to eavesdropping by hackers who are able to control the connection between the end user and the website he's visiting. At the Ekoparty security conference in Buenos Aires later this week, researchers Thai Duong and Juliano Rizzo plan to demonstrate proof-of-concept code called BEAST, which is short for Browser Exploit Against SSL/TLS. The stealthy piece of JavaScript works with a network sniffer to decrypt encrypted cookies a targeted website uses to grant access to restricted user accounts. The exploit works even against sites that use HSTS, or HTTP Strict Transport Security, which prevents certain pages from loading unless they're protected by SSL. The link for this article located at The Register UK is no longer available. . The vulnerability resides in versions 1.0 and earlier of TLS, or transport layer security, the succe. researchers, serious, weakness, virtually, websites, protected, secure. . LinuxSecurity.com Team
Sep 21, 2011
•
Cryptography
83
data breachcyber attackwebsite defacementLulzSec Attacks PBS Website Over Controversial Documentary
Hackers aligned with WikiLeaks broke into and defaced the website of US broadcaster PBS over the weekend shortly after it had aired a less than flattering documentary about the whistle-blowing site.. LulzSec took particular offence at the portrayal of presumed WikiLeaks source Bradley Manning during of an episode of PBS's Frontline news magazine programme. In response, the hackers broke into PBS website before swiping passwords and other sensitive information. The link for this article located at The Register UK is no longer available. . LulzSec took particular offence at the portrayal of presumed WikiLeaks source Bradley Manning during. hackers, aligned, wikileaks, broke, defaced, website, broadcaster. . LinuxSecurity.com Team
May 31, 2011
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!