Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 8 articles for you...
83
cyber threatssecurity risksnetwork configurationAddressing IPv6 Security Risks in Today’s Enterprise Networks
If your IPv6 strategy is to delay implementation as long as you can, you still must address IPv6 security concerns right now. If you plan to deploy IPv6 in a dual-stack configuration with IPv4, you're still not off the hook when it comes to security. And if you think you can simply turn off IPv6, that's not going to fly either. . The biggest looming security threat lies in the fact that enterprise networks already have tons of IPv6 enabled devices, including every device running Windows Vista or Windows 7, Mac OS/X, all Linux devices and BSD. The link for this article located at Network World is no longer available. . As organizations adopt IPv6, they face evolving security challenges due to its complexity and unique vulnerabilities. Enterprises must strengthen their defenses to mitigate risks.. IPv6 Security, Enterprise Networks, Network Configuration, Cybersecurity Threats, Dual-Stack Implementation. . LinuxSecurity.com Team
Nov 28, 2011
•
Hacks/Cracks
78
security advisorysecurity issuebrowserWebGL Advisory: New Threats In 3D Graphics Exploits by Context
Context highlights additional WebGL vulnerabilities and raises more questions for Khronos. 16 June 2011: Researchers at Context Information Security who exposed security flaws in WebGL last month have identified further concerns about early implementations of the new technology that allows web pages to draw fast 3D graphics to deliver a much richer experience to web users. In one example, a vulnerability in the Mozilla Firefox browser made it possible for malicious web pages to capture any screenshot from a target PC . Cybersecurity analysts have revealed new vulnerabilities in WebGL, raising serious concerns about internet browser security and the dependability of 3D user interfaces. WebGL Security, Browser Threats, 3D Graphics Issues. . LinuxSecurity.com Team
Jun 16, 2011
•
Vendors/Products
77
security advisorycybersecurityinternet threatsImprove DNS Security: Best Practices for Implementing DNSSEC
The Domain Name System (DNS) plays a critical part in Internet communications, as it's used to translate a human-readable computer hostname into an IP address -- such as searchsecurity.co.uk to 65.214.43.49 -- so that it can be understood and used by networking equipment, computers and software programs. . It's the world's largest distributed database, but when it was originally designed back in 1984, scalability and availability were the key goals and little attention was given to security. This lack of security has lead to a series of DNS-related vulnerabilities. For example, if attackers can change your DNS zone data -- the DNS namespace for which you're administratively responsible -- they can set up counterfeit Web servers, or cause email to be redirected to other servers. Cybercriminals are increasingly using false DNS servers to intercept legitimate Web addresses and redirect users to fake sites in order to capture personal information or install malware. A fix for the critical shortcomings of DNS server security has been a long time coming, in large part due to the problem of maintaining backwards compatibility. But Domain Name System Security Extensions (DNSSEC) has finally been rolled out, and this new security layer is a major step towards a more secure Web address The link for this article located at Search Security is no longer available. . Explore DNS security and the essential role of DNSSEC in fighting internet threats, enhancing the integrity of DNS data and boosting overall cybersecurity.. Dns Security,Dnssec Implementation,Internet Threats,Network Security,Cybersecurity Best Practices. . LinuxSecurity.com Team
Oct 18, 2010
•
Server Security
72
intrusion detectionaccess controlfirewallFirewalls and Security Strategy: Insights from Daniel Kennedy
This is the second of two parts of an interview with Daniel Kennedy, MSIA, who graduated from the Master of Science in Information Assurance program in the School of Graduate Studies of Norwich University in 2008. He has recently become a contributor to an interesting, thoughtful and valuable blog at Forbes Online and I interviewed him recently about his new project. . What do you think your focus will be in the coming months? I'm still finding my voice on this Web site, but my primary focus will be on what I think is most missing: fundamental security strategy within companies and its effective execution. I am very much in favor of the capabilities new and innovative products can provide, but I find their implementation in many organizations is haphazard; the products lead the implementation calendar rather than allowing internal teams to find the right products that fit into an overall, strategy that prioritize the rollout of its component parts. For example, there are organizations which provide privileged access to all users and have no Web filtering, yet they are asking about high end data leakage protection (DLP) products. Companies may have no patch management and no validation of their anti-virus, yet they want to discuss high end log review security information and event management (SIEM) products. Many companies are not doing intrusion detection at all, doing it in baffling ways, or outsourcing it to providers who aren't actually monitoring anything. In most cases all of these things should be part of a strategy, but more complex projects will only be successful if built on a foundation of getting the basics right. The link for this article located at Network World is no longer available. . Delve into essential perspectives on cybersecurity measures and firewall deployment shared by a Forbes expert in this captivating discussion.. Firewall Implementation, Security Strategy, Intrusion Detection, Access Control. . Alex
Jun 01, 2010
•
Firewalls
67
security practicescryptographybook reviewExploring Bruce Schneier's Cryptography Engineering for Practitioners
Bruce Schneier has updated Applied Cryptography. I have a new book, sort of. Cryptography Engineering is really the second edition of Practical Cryptography. Niels Ferguson and I wrote Practical Cryptography in 2003. Tadayoshi Kohno did most of the update work. Cryptography Engineering is a techie book; it's for practitioners who are implementing cryptography or for people who want to learn more about the nitty-gritty of how cryptography works and what the implementation pitfalls are. If you've already bought Practical Cryptography, there's no need to upgrade unless you're actually using it. The link for this article located at Bruce Schneier is no longer available. . Cryptography Engineering is a techie book; it's for practitioners who are implementing cryptography . cryptography, bruce, schneier, updated, applied, engineerin. . LinuxSecurity.com Team
Mar 24, 2010
•
Cryptography
74
security advisorythreat mitigationinternet securityVeriSign DNSSEC Implementation: Enhancing Internet Security By 2011
VeriSign has said a significant outstanding internet security vulnerability will be closed by 2011, after delays caused by technical aspects of the implementation. The problem is that DNS, the Domain Name System that translates internet addresses such as website URLs into numerical values, can be seeded with false values and used to misdirect users.. VeriSign told ZDNet on Friday that it will put in place DNSSEC, a protocol which will guarantee the origin and integrity of DNS data, for the .com and .net domains by the first quarter of 2011. "Both .net and .com are very large domains," said Pat Kane, VeriSign vice president of naming services. Kane added that ".net alone has more than 12 million domain names. Our first priority is to safely and securely implement DNSSEC, as it impacts the Domain Name System, one of the core building blocks of the internet". The link for this article located at ZDNet UK is no longer available. . The Internet Corporation plans to deploy DNSSEC by 2011 to bolster online security and safeguard against potential DNS threats.. DNS Integrity, VeriSign Update, DNSSEC Implementation. . Anthony Pell
Nov 16, 2009
•
Network Security
67
data securityencryptionIT managementStudy: Low Encryption Implementation Among IT Managers Shows Urgency
While 66% of IT and business managers surveyed have "some type" of encryption strategy, only 16% have enterprise-wide strategies, the Ponemon Institute found. While IT and business managers say they know encryption is critical to safeguarding company information on laptops, not many are actually doing it. . While 66% of IT and business managers surveyed have "some type" of encryption strategy, only 16% have enterprise-wide strategies, the Ponemon Institute found. While IT and business managers say they know encryption is critical to safeguarding company information on laptops, not many are actually doing it. The link for this article located at Read this full article is no longer available. . While most IT leaders acknowledge the significance of data protection, actual deployment stands at just 16%, showing a considerable gap.. encryption strategy, IT security, data protection, business encryption. . LinuxSecurity.com Team
Feb 14, 2007
•
Cryptography
72
network securityfirewallDMZUnderstanding Firewall Implementation for Network Security
A firewall is an organizationally and technical concept for the separation of networks, its correct implementation and constant maintenance. One piece that's often used is a piece of hardware that connects to networks the way as it's allowed in the concept. This piece of hardware is often called firewall-system/computer or in short firewall. . How does a typical technical implementation of a firewall look like? First you put a packetfilter between the directly connected networks (network 1 -- packetfilter -- perimeter network -- packetfilter -- network 2). The packetfilters only allow traffic from the directly attached networks. A connection from one network to the not directly attached packetfilter or the other network is strictly forbidden. The perimeter network is also known as DMZ (Demilitarized Zone). In it there are switching computers for all protocols/services who should work from one net to the other net. Such a switching computer is also known as Proxy, because it works pro procurationem/by proxy (like a secretary). Proxies work on application level, means they understand the communi The link for this article located at Lutz Donnerhacke is no longer available. . How does a typical technical implementation of a firewall look like? First you put a packetfilter be. firewall, organizationally, technical, concept, separation, networks, correct. . Benjamin D. Thomas
Feb 10, 2005
•
Firewalls
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!