Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 553
Alerts This Week
Warning Icon 1 553

Stay Ahead With Linux Security News

Ghostapproval Hero Esm H350
Security Vulnerabilities Price Tag%201security advisory unauthorized access

AI coding assistants have become a staple in many Linux developers' daily workflows. Whether you're generating boilerplate, refactoring code, or updating configuration files, it's easy to assume these tools stay safely inside your project directory. . Researchers recently pulled the curtain back on a threat they’ve dubbed " GhostApproval ." It’s a direct hit to the way we use tools like Cursor, Amazon Q, and Claude Code. They found these assistants have a dangerous blind spot: they can be...
1 min read Security Vulnerabilities
8.Locks HexConnections CodeGlobe Esm H350
Network SecurityPrice Tag%201network security firewall management

Linux runs a huge portion of today's infrastructure because it gives administrators an unusual amount of control over the system. That control extends to networking, where almost every aspect of packet flow, routing, filtering, and interface behavior can be customized. The trade-off is that very little of that hardening happens automatically. A fresh installation is usually built to communicate, not to isolate. . As environments grow, servers start exchanging data with monitoring platforms,...
3 - 6 min read Network Security
Enterprise SSH Hero Esm H350
Security Vulnerabilities Price Tag%201security advisory authentication

We often view OpenSSH security updates through the lens of standard patch management. When a new CVE hits, we scramble to update, check our versions, and return to business as usual. But recent vulnerabilities tied to distribution-added OpenSSH GSSAPI patches are a reminder that the danger doesn't always lie in the core code; it often resides in the "convenience" features we layer on top. . These recent issues shouldn't just trigger an apt upgrade or dnf update; they should trigger a...
3 - 6 min read Security Vulnerabilities
4.Lock AbstractDigital Esm H350
Security Trends Price Tag%201privilege escalation Linux security

Linux security teams are drowning. Patches, kernel updates, new CVEs every week. SSH exposed here, an old web service there, and a forgotten cron job running as root. On top of that, SIEM dashboards blink all day with alerts that all claim to be “high priority.” . It’s no surprise that people stop paying attention. The real problem isn’t a lack of data. It’s the opposite. Too much noise, not enough signal. Security teams see huge lists of vulnerabilities and thousands of alerts, but very...
2 - 4 min read Security Trends
Prioritizing This Weeks Critical Updates Hero Esm H350
Security Vulnerabilities Price Tag%201security advisory critical

Before you close out the week, check what still needs to be patched. . The list is not small. Ubuntu and Red Hat pushed kernel updates. OpenVPN and OpenShift both received security fixes. Several everyday Linux components were patched too, including Vim, nginx, cifs-utils, LibVNCServer, nghttp2, and Perl. That is the kind of week administrators can easily write off as routine. It should not be. These are the updates that keep small openings from turning into real access. Why This Week Looks...
4 - 7 min read Security Vulnerabilities
Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is application sandboxing truly safe?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/155-is-application-sandboxing-truly-safe?task=poll.vote&format=json
155
radio
0
[{"id":500,"title":"Malware still escapes container walls.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":501,"title":"Supply chains corrupt trusted packages.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":502,"title":"Convenience consistently compromises strict security.","votes":1,"type":"x","order":3,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -4 articles for you...
77
General Esm H240
Price Tag%201software releaseftp serversecurity features

vsftpd: 1.0 Release Details On Security And Scalability

Chris Evans, author of the "very secure" FTP daemon, has released version 1.0 of his software. The previous version included bandwidth control. Chris writes, "vsftpd is also extremely fast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment.". . .. Chris Evans, author of the "very secure" FTP daemon, has released version 1.0 of his software. The previous version included bandwidth control. Chris writes, "vsftpd is also extremely fast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment." Chris is also looking for ideas for his next project. Date: Mon, 12 Nov 2001 22:34:56 +0000 (GMT) From: Chris Evans To: This email address is being protected from spambots. You need JavaScript enabled to view it. Subject: vsftpd-1.0.0 Ok, the thing deserves a 1.x release version now, it seems to be doing useful work on various production sites. Before the 1.0 release details, something potentially interesting: my next project. Before I start investigating the feasability, I want to judge the demand. I'm considering a "vssshd", which would be a very cut down/minimal server-only implementation of the ssh2 protocol. The intended audience would be paranoid people who want no-frills secure remote access. I'm not saying the current sshd implementations are insecure; however, their design leaves something to be desired. In particular there seems to be rather too much use of "root" (witness the severity of the deattack.c flaw). I am tempted to investigate the possibility of writing a minimal sshd where all protocol parsing and in particular SSL code runs as non-root in a chroot() environment. vsftpd-1.0.0 Approximate changelog: - Fix build on Red Hat7.2 - Fix build on Mandrake systems README: vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but a reflection that I have written the entire codebase with security in mind, and carefully designed the program to be resilient to attack. Recent evidence shows that vsftpd is also extremelyfast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment. vsftpd is now a proven stable solution. Of particular note, Red Hat used vsftpd to enable to support 15,000 concurrent users across their server pool. This extreme load was generated by the release of Red Hat 7.2 to the world. Cheers Chris . Uncover ProFTPD release 1.3.5, a robust FTP server created by Rob Richards, intended for efficiency and extensibility.. vsftpd, secure ftp, file transfer, open source daemon. . LinuxSecurity.com Team

Calendar%202 Nov 12, 2001 •User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is application sandboxing truly safe?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/155-is-application-sandboxing-truly-safe?task=poll.vote&format=json
155
radio
0
[{"id":500,"title":"Malware still escapes container walls.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":501,"title":"Supply chains corrupt trusted packages.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":502,"title":"Convenience consistently compromises strict security.","votes":1,"type":"x","order":3,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics