Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Ahead With Linux Security News

Filter Icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 54 articles for you...
209

Effective Ransomware Defense for Linux: 5 Steps for Business Continuity

Ransomware attacks are surging—and in 2024, damages topped $30 billion . . Many of these attacks target Linux systems, especially in servers, cloud infrastructure, and DevOps pipelines. Attackers do not always need complex tools. A single misconfigured port or outdated package can open the door. Once inside, they encrypt data, demand payment, and sometimes leak files. No business is too small. No system is too secure—unless it is actively defended. By following a clear plan, businesses can reduce their risk and respond effectively if an attack occurs. Here is a 5-step action plan to build a strong ransomware defense. It is simple and practical. Step 1: Strengthen Identity and Access Controls Most ransomware attacks do not need to break through firewalls. They walk right in using stolen or weak credentials. Once inside, attackers move fast, escalating privileges, disabling security tools, and locking systems. That is why strong access control is your first line of defense. Here is how to tighten it up: Use Multi-Factor Authentication (MFA): MFA is required for all users, especially those with admin rights. Even if a password leaks, MFA can block access. Harden your Linux systems : Disable unnecessary services and ports. Configure firewalls to limit inbound and outbound traffic to essential services only. Enforce Least Privilege : Only give users access to what they need. No shared accounts. No broad permissions. Rotate and Manage SSH Keys : Remove unused keys. Use tools to manage and rotate them regularly. Disable Root Login over SSH : Prevent direct root access. Use sudo instead, with full audit logging. Monitor and Log All Access : Track logins, failed attempts, and privilege changes. Use auditd and log monitoring tools . Lock Down Inactive Accounts : Disable or remove no longer used accounts. These simple controls reduce your attack surface and make it harder for attackers to gain a foothold. Step 2:Build an Ecosystem of Ransomware Solutions Ransomware attacks do not have a single entry point, and they require a multi-layered defense strategy. An ecosystem approach is essential to build an effective defense. This ecosystem includes different security tools that work seamlessly together to cover multiple domains. Here are the key strategies for building an ecosystem: Focus on identity and access management (IAM): Protect critical accounts by implementing strict identity controls, including privileged access management (PAM) and robust user authentication. Manage vulnerabilities actively : Regular vulnerability assessments and mitigation through patch management and red teaming exercises help identify and close gaps in your systems. Implement endpoint protection: From endpoint detection and response (EDR) to user behavior analysis, ensure that every endpoint is properly secured and continuously monitored. Integrate security tools : Use security information and event management (SIEM) and threat intelligence platforms that integrate across your environment to detect and respond to ransomware attacks effectively. If you want to see what a complete, layered ecosystem looks like in practice, check out this comprehensive ransomware defense strategy , which outlines actionable steps and tools to implement at each layer of your infrastructure. An ecosystem that ties together various technologies and processes ensures a more robust and cohesive defense, making it harder for ransomware to succeed. Step 3: Back Up with a Purpose Backing up your data is one of the most important steps in protecting your business from ransomware. If your systems are attacked, having a reliable backup can help you recover without paying a ransom. But not all backups are equal. It is important to back up your data correctly to ensure it’s safe and easy to restore. Here are some strategies for effective data backups: Follow the 3-2-1 Rule: Keep three copies ofyour data. Store two on different media types (e.g., hard drives, cloud). One of those copies should be offsite or in the cloud so it's safe from local disasters like fire or flood. Test Your Backups : Regularly test your backups to make sure they work. A backup is useless if you can’t restore the data when needed. Ensure Backups Are Immutable : Ensure your backups are protected from being altered or deleted by ransomware. Some backup solutions offer features that prevent data from being changed once it’s stored. Automate Backups: Set up automated backups to run regularly. This reduces the risk of forgetting to back up important data and ensures that your most recent information is always protected. By following these steps, you’ll have peace of mind knowing that your data can be recovered quickly if ransomware strikes. Step 4: Build a Human Firewall Through Security Training Your technical defenses mean nothing if one employee clicks a malicious link. Deloitte mentions that over 90% of cyberattacks start with phishing. Training turns your team from vulnerabilities into vigilant defenders. Here are the key strategies: Phishing Simulation Drills : Conduct monthly mock phishing campaigns using realistic templates. Track click rates and provide immediate feedback to those who fail. Gradually increase difficulty to keep staff alert. Create a reporting culture where suspicious emails get forwarded to IT immediately. Password Hygiene Enforcement : Mandate password managers for all staff. Enforce 16-character minimums and block common passwords. Implement multi-factor authentication everywhere - especially for email and file access. Revoke credentials immediately when employees leave. Incident Response Protocols : Teach staff the exact steps for reporting anomalies - from ransomware pop-ups to suspicious login attempts. Establish clear escalation paths and response timelines. Run quarterly tabletop exercises simulating real breachscenarios. Tailored Role-Based Training : Developers need secure coding practices, finance teams require invoice fraud detection, and executives need advanced social engineering defense. Generic training wastes time—customize content by department. Measure effectiveness through metrics like phishing test pass rates and incident reporting speed. Reward security-conscious behavior publicly to reinforce its importance. Remember, your security chain is only as strong as its weakest human link. Pro Tip: New hire onboarding must include security training before granting system access. One untrained employee can undo all your technical safeguards. Step 5: Prepare for Fast Recovery and Restoration Ransomware attacks may be inevitable, but your ability to recover from them quickly can determine the extent of the damage. Having a reliable recovery process ensures your organization can return to normal operations without significant downtime. Here are the top strategies for recovery: Implement regular backups : Ensure that your backup solutions are automated and secure, stored offsite, and tested regularly to confirm they can be restored if necessary. Prepare a disaster recovery plan : Develop a clear plan for how your organization will recover from a ransomware attack. This includes defining recovery time objectives (RTO) and recovery point objectives (RPO). Continuously test recovery protocols : Regularly simulate ransomware recovery scenarios to ensure your team can restore data and services quickly and efficiently without disrupting business operations. Ensure compliance with data retention laws : Your recovery plan should also comply with relevant data protection and privacy regulations, ensuring sensitive data is handled appropriately during recovery. A well-structured recovery process allows your organization to quickly recover from a ransomware attack, minimizing operational and financial losses. Although prevention remains thepriority, Cyber Insurance is increasingly part of the broader resilience conversation around breach costs, recovery, and business continuity. Stay Ahead of Ransomware Building a strong ransomware defense goes beyond just implementing advanced technology. It requires a well-thought-out strategy and operational plan to effectively address every stage of a potential attack. Key takeaways to remember include: A comprehensive ransomware defense strategy must include both proactive and operational elements, focusing on prevention, detection, and response. Layered defenses are essential in addressing risks at various points during an attack. Regularly updating your threat intelligence helps you avoid new ransomware tactics and techniques. Having a solid backup and recovery plan minimizes downtime and data loss during an attack. Continuously evaluating and adapting your defense mechanisms ensures your strategy remains effective in the face of evolving threats. Remember, ransomware threats are constantly evolving. Stay vigilant and keep updating your strategies to stay safe. With the right plan, you can protect your data and ensure business continuity even in the face of an attack. . Numerous ransomware threats focus on Linux platforms. Implement the following guidelines to establish a robust protection and recovery plan.. Ransomware Defense, Linux Security, Data Backup, Recovery Plans. . MaK Ulac

Calendar 2 Apr 17, 2025 User Avatar MaK Ulac Security Trends
209

Why ITDR is Essential for Securing Linux in Identity-Based Threats

Identity-based attacks like login attempts from unusual geographic locations or at unexpected times, as well as enforcing MFA and maintaining detailed logs of all identity-related activities, are becoming more important as attacks against these systems become more prevalent. . Integrating Identity Threat Detection and Response (ITDR) into your security arsenal helps us identify and stop attacks that target user identities, a common entry point for hackers. But what is ITDR , and why is it so critical? For organizations using Linux systems—renowned for their security and versatility—ITDR provides an extra layer of defense, making it harder for hackers to infiltrate their networks. The user identification layer is the usual entry point for most attacks, and ITDR allows us to track and contain them there. Linux systems are well-known for their security and flexibility, and ITDR adds an extra layer of protection that will make hacking much more difficult for enterprises using these systems. Let's take a closer look at ITDR and its significance in a Linux setting. What is ITDR? Identity threat detection and response (ITDR) is a cybersecurity strategy and technology framework designed to detect, analyze, and respond to threats targeting identities. This approach identifies abnormal or malicious activity involving user credentials, privileges, and access patterns. Security teams often expand this layer further with identity security platforms that monitor authentication patterns, detect compromised credentials, and provide visibility into privileged account activity across Linux environments. ITDR complements other cybersecurity technologies, such as endpoint detection and response and network security solutions, by explicitly addressing vulnerabilities and attacks targeting identity systems. Benefits of ITDR for Linux Systems HIDTR is always looking for security risks on your Linux systems. Its advanced analysis can detect suspicious behavior in real-time, allowing you to take actionbefore a catastrophic breach happens. An identification theft prevention system (IDTR) lessens the likelihood of data breaches and their possible consequences by aggressively controlling identity-based attacks, helping to Improve Security. Helps Improve Incident Response ITDR will help shorten your response time in case of a security problem. It will save you time by immediately identifying risks with real-time monitoring capabilities. Security teams can expedite recovery by analyzing system logs and user behavior to determine the cause of incidents and the extent of damage. Helps Reduce Operational Costs IDTR can automate many routine security tasks, allowing your security team to focus on more strategic initiatives. By preventing and mitigating attacks, ITDR also helps minimize system downtime and avoid costly business disruptions. Linux: A Target for Attackers As Linux systems have taken center stage in enterprise environments, especially in servers, cloud platforms, and DevOps, they've attracted the attention of malicious actors. Key vulnerabilities include: Privilege escalation: Attackers exploit vulnerabilities to gain administrative access to Linux systems. Weak SSH keys: Compromised or mismanaged Secure Shell keys can allow unauthorized access. Insider threats: Malicious insiders or human error can lead to identity misuse or data breaches. Configuration flaws: Misconfigured Linux servers are prime targets for exploitation. Integration with Open Source Monitoring Tools When integrated with popular open-source monitoring tools such as Prometheus, Grafana, and the ELK Stack, ITDR solutions benefit from an extended range of visibility, analytics, and incident response capabilities. Here's how these integrations can be implemented and the benefits they offer: Prometheus Integration Prometheus , a leading monitoring and alerting tool, is ideal for real-time collecting and analyzing metrics. ITDR solutions can leverage Prometheus by: Exportingmetrics: Import critical identity and access metrics into IT disaster recovery systems, as Prometheus-compatible metrics should include login abnormalities, privilege escalations, and failed authentication attempts. Custom rules and alerts: Defining custom alerting rules in Prometheus based on ITDR data, such as detecting unusual activity patterns or spikes in login failures. Centralized visualization: Integrating Prometheus with Grafana (discussed below) to visualize ITDR metrics in dashboards makes detecting identity-based threats easier. Grafana Integration Grafana ’s powerful visualization capabilities complement ITDR solutions by providing intuitive dashboards for monitoring identity-related metrics and trends: Data aggregation: By combining ITDR indicators with other system metrics in Grafana, we can get the whole picture of the Linux environment's security and health. Interactive dashboards: Building interactive dashboards to display ITDR data, such as authentication trends, geolocation heatmaps for logins, and role-based activity monitoring. Cross-domain insights: Combining ITDR data with infrastructure metrics like CPU or memory usage to correlate identity-based threats with system anomalies for deeper insights. ELK Stack Integration The ELK Stack offers robust log aggregation, processing, and visualization capabilities, making it an excellent choice for ITDR solutions: Log enrichment: Using Logstash to ingest and enrich identity-related logs from ITDR tools, such as audit logs, access attempts, and policy violations, with contextual data. Centralized log storage: Storing enriched ITDR logs in Elasticsearch for fast querying and correlation with other security data. Threat detection dashboards: Building Kibana dashboards to visualize identity-based threat data, such as anomalous login attempts, unauthorized privilege escalations, and suspicious lateral movement. Proactive querying: Crafting Elasticsearch queries to identifypatterns indicative of identity-based threats, triggering alerts, or automated responses. Role of Container Security in ITDR Kubernetes , a powerful container orchestration platform, introduces unique security challenges due to its dynamic and multi-layered nature. Serious security breaches can occur due to misconfigurations involving service accounts, nodes, pods, and container workloads, all requiring certain access privileges. Attackers can take advantage of exposed API endpoints, permissions that have been over-provisioned, and compromised credentials that are kept in configuration files. One way to make Kubernetes environments far more secure is to use an Identity Threat Detection and Response framework. Integrating with Kubernetes Role-Based Access Control, Threat Detection and Response (ITDR) aids in enforcing least-privilege access, guaranteeing that workload identities and service accounts possess only the essential authorizations. Additionally, ITDR can monitor identity-related telemetry to spot suspicious activity, such as unexpected privilege escalations or attempts at unauthorized access. To further strengthen security, ITDR can integrate with external tools like HashiCorp Vault or AWS Secrets Manager for secure secret management. Organizations can significantly minimize the attack surface by reducing the risk of hardcoding sensitive information. Impact of ITDR on Compliance and Regulatory Requirements That is to say, recording access and activity logs, essential compliance features, are precisely what Information ITDR does to Linux systems. The concept of least privilege protects sensitive data and systems from unauthorized access with granular access controls. ITDR's real-time threat detection capability helps decrease the risk of non-compliance fines by letting them recognize and mitigate possible security incidents much quicker. Also, automated reporting translates to ease of compliance documentation that furnishes clear evidence of following laws. ITDR supports thedata breach notification requirements by delivering rapid incident reports on breaches under GDPR ; under HIPAA and PCI DSS, ITDR protects protected health information and payment card information through multi-factor access controls. Integrating the functionality of ITDR on your Linux infrastructure will proactively let you stay compliant, ease up auditing, and reduce or even eliminate the risks of breach of any regulations in nature. How ITDR Boosts Linux Security ITDR is a powerful tool that strengthens Linux security by focusing on a crucial area: identity and access management. This layer is often overlooked, but it's a major target for cyberattacks. Let's see how ITDR helps safeguard your Linux systems: Proactive Threat Detection ITDR is like a vigilant guard, constantly monitoring your system for suspicious activity. It spots anomalies like: Login attempts from unfamiliar locations Unusual privilege escalations Tampering with critical system files By catching these red flags early, ITDR helps you to react swiftly before a breach can take hold. Enhanced Credential Protection One of the most common ways hackers infiltrate Linux systems is by stealing credentials. ITDR protects your credentials by: Keeping a close eye on SSH key usage and flagging unauthorized access Detecting phishing attacks designed to trick users into revealing their passwords Automatically locking out compromised accounts to prevent further damage Securing Privileges Linux systems often have users with varying levels of access. ITDR ensures that these privileges are used responsibly by: Stopping privilege escalation attempts in their tracks Providing a clear view of all privileged user activities Implementing strict least-privilege policies to limit access to only what's needed A 360-Degree View of Identity ITDR offers a comprehensive overview of identity-related activities across your Linux systems. This bird's-eye view helps you understand howidentities interact with system resources and identify potential vulnerabilities. Compliance Made Easier With ITDR, compliance efforts are made easier for firms in regulated industries. You may meet legal obligations and demonstrate accountability with the help of ITDR, which enforces secure identity management procedures and generates extensive audit records. By protecting Linux systems from intrusion, ITDR goes above and beyond the call of duty by fixing an often-overlooked but critically important security hole: identity management. ITDR protects your Linux infrastructure from constantly changing cyber threats by actively identifying them, safeguarding credentials, and maintaining least-privilege policies. Take immediate action to safeguard your systems and safeguard your organization's future—don't wait for a breach to reveal the weaknesses in your defenses. . Implementing ITDR within your Linux environment strengthens protection against identity-centric attacks and boosts the efficiency of incident management.. Identity Threat Detection, Linux Systems, Incident Management, Security Framework, Identity Protection. . MaK Ulac

Calendar 2 Nov 29, 2024 User Avatar MaK Ulac Security Trends
79

Janssen Project: New Cloud-Native Identity Management From Linux Foundation

The Linux Foundation has announced a new, secure cloud-native identity and access management software platform - the Janssen Project . . Every time we use an online pay service, manage our finances online, or enter our credit-card information, we're demonstrating our good faith. Now, one organization wants to help us feel even more secure. Today (Dec. 8), the Linux Foundation announced a cloud-native identity and access management software platform that prioritizes security and performance, the Janssen Project, which is based on the Gluu server and features signing and encryption functionalities. The integrity of our connections online is conveyed via identity software, from our devices to a complex web of backend services. Despite assurances and encouragement on this use, which we grow increasingly dependent on, digital identity remains a challenge and is at the very crux of delivering truly trustworthy online security. . Protect your digital exchanges using the innovative cloud-based identity verification system developed by the Linux Foundation.. Cloud-Native Identity Management, Security Solutions, Open Source Software. . LinuxSecurity.com Team

Calendar 2 Dec 09, 2020 User Avatar LinuxSecurity.com Team Security Projects
81

Exploring Password Alternatives for Stronger User Authentication

Are you aware that many organizations are questioning whether eliminating passwords as an authentication tool might augment their overall security posture? How do you feel about this? . User authentication doesn't get much easier than the password. But for organizations across the globe, poor password hygiene has become one of the most challenging security issues. According to Troy Hunt, creator of HaveIBeenPwned, an increasing number of data breaches and data leaks are a direct result of weak passwords and password reuse. The link for this article located at DarkReading is no longer available. . User validation focuses heavily on secret codes, but the rise in cyber intrusions urges companies to re-evaluate their protective strategies.. Identity Management, Password Security, Authentication Solutions. . LinuxSecurity.com Team

Calendar 2 Jul 30, 2019 User Avatar LinuxSecurity.com Team Privacy
82

NIST Cybersecurity Framework Update: Focus on Risk Management and Identity

The National Institute of Standards and Technology's (NIST) updated Cybersecurity Framework, scheduled for release later this year, should provide some welcome new advice for organizations struggling to manage cyber-risk in the current threat environment. . The key areas where the framework will provide guidance is about supply chain risks, identity management and cybersecurity risk assessment and measurement. NIST released two draft framework updates containing the changes last year - the second in December 2017. It is currently reviewing public comments and will release a finalized version in the spring. . The forthcoming NIST Cybersecurity Framework intends to improve directives on risks associated with supply chains and user identity oversight.. NIST Cybersecurity, Risk Management, Supply Chain Security, Identity Protection. . Dave Wreski

Calendar 2 Mar 05, 2018 User Avatar Dave Wreski Government
72

Evolving to Next-Gen Firewalls: Best Practices for Security and Control

What should enterprises expect if they want to make the transition from a traditional firewall to a next-generation firewall? It starts with a decidedly different way of thinking about security goals associated with a firewall, especially in terms of establishing application-aware controls over employees as they access the Internet, the Web and social networking sites. (See Unbatten the hatches.) . "There is a chasm to cross," acknowledges Patrick Sweeney, vice president of product management at SonicWall. The old way of talking about traditional port-based firewalls, with system administrators discussing the "language of protocols," is inadequate. Companies need to adopt a more business-focused vocabulary, related to application use, that's common to the CIO, CFO and CEO. "There has to be unification of the languages they speak," Sweeney says. That's because the new generation of fast, intelligent firewalls are application-aware, enabling enterprises to establish and enforce identity-based application usage policies for employees. So-called next-generation firewalls (NGFW) also incorporate VPN capabilities, perform intrusion prevention sweeps of traffic, have the brains to use technologies such as reputation filtering, and integrate with Active Directory for identity and policy management. The link for this article located at Network World is no longer available. . The transition from traditional firewalls to next-gen firewalls signifies a pivotal evolution in cybersecurity, enhancing threat detection and network control. Next-Generation Firewall, Application Control, Security Practices. . Alex

Calendar 2 Jan 03, 2011 User Avatar Alex Firewalls
81

Identity Conference Insights: OpenID Clashes and Emerging Trends

There are too many identity-related trade shows and conferences spread over venues all over the world and not enough time to get to them all. It's a far cry from when we started this newsletter 10 years ago, and the increased interest in identity issues should be applauded, but I can't be everywhere at once!. For a while, I was able to keep up on happenings at conferences I missed through the blog posts of people I considered reliable diarists. But, as I implied in "The Blogger's Lament", that method of tracking information may soon be a thing of the past. Fortunately, there's still a few good bloggers left. While I was in Amsterdam for Novell's BrainShare, the semi-annual Internet Identity Workshop (IIW) was taking place in Mountain View, Calif. It appears it was a lively session for OpenID advocates of all stripes. Notes from most of the sessions are available on the IIW wiki and there's good information on IIW co-founder Phil Windley's "Technometria" blog, but it's xmlgrrl herself, Eve Maler (PayPal distinguished engineer) who dishes the real dirt on the OpenID clashes. In "OpenID and OAuth: As the URL Turns" she presents the "Soap Opera Digest " synopsis of the goings-on: The link for this article located at Network World is no longer available. . For a while, I was able to keep up on happenings at conferences I missed through the blog posts of p. there, identity-related, trade, shows, conferences, spread, venues. . LinuxSecurity.com Team

Calendar 2 Jun 01, 2010 User Avatar LinuxSecurity.com Team Privacy
78

Symantec's $1.28 Billion Acquisition of VeriSign's Security Division

In case your boss ever questions whether security is big business... Symantec will pay US$1.28 billion to acquire VeriSign's security business. The two companies confirmed the rumored acquisition, saying it would give VeriSign the opportunity to focus on its more-profitable domain name business, while allowing Symantec to broaden its growing portfolio of enterprise security products. l.. "There is a real need to be able to know who the user is and what they should have access to... but without the central theme of identity we weren't able to provide the total solution," Symantec CEO Enrique Salem said during a conference call to discuss the deal. "IT needs to be able to control the information, and identity matters to be able to provide that solution." Reports surfaced Tuesday that VeriSign had been shopping around its encryption technology and service business, and naming Symantec as the buyer. The VeriSign business unit sells SSL (Secure Sockets Layer) certificates -- used to authenticate secure Internet servers -- two-factor authentication tokens, fraud detection and public key infrastructure products for government and the enterprise. But the business has grown slowly of late, hurt by dropping SSL certificate prices, a fact that is reflected in the unit's low purchase price relative to its $371 million in annual revenue. "If you want to succeed in that market you have to have a lot of services, the platform, large and growing distribution channels -- a lot of things that Symantec has," Mark McLaughlin, VeriSign's president and CEO, said on the conference cal The link for this article located at Tech World is no longer available. . 'There is a real need to be able to know who the user is and what they should have access to... but . questions, whether, security, business, symantec, billi. . LinuxSecurity.com Team

Calendar 2 May 20, 2010 User Avatar LinuxSecurity.com Team Vendors/Products
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here