Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 9 articles for you...
74
sendmailinternal securityemail filterSendmail Configurations for ILOVEYOU Worm Protection Guide
Included here is information that can be added to your sendmail configuration to protect your internal users from the ILOVEYOU worm from spreading, as well as more information from this bugtraq post. Be sure to note that variations . . . . Included here is information that can be added to your sendmail configuration to protect your internal users from the ILOVEYOU worm from spreading, as well as more information from this bugtraq post. Be sure to note that variations are already appearing. This bugtraq post points out a variation, as well as a procmail filter, filters for Postfix, ideas from Sendmail.com, and other great information to put this damn thing to rest. The link for this article located at Jose Nazario / bugtraq is no longer available. . Protect your sendmail setup against the ILOVEYOU worm by modifying MIME settings, filtering attachments, enhancing access control, and educating users. sendmail configurations, ILOVEYOU worm, email security measures. . Anthony Pell
Nov 10, 2023
•
Network Security
83
security advisoryexposurebreach2006 Wal-Mart Breach: Internal Development Team Targeted
Wal-Mart was the victim of a serious security breach in 2005 and 2006 in which hackers targeted the development team in charge of the chain. Internal documents reveal for the first time that the nation The link for this article located at Wired is no longer available. . Internal documents reveal for the first time that the nationThe link for this article located at Wir. wal-mart, victim, serious, security, breach, which, hackers, targeted. . LinuxSecurity.com Team
Oct 28, 2009
•
Hacks/Cracks
72
security advisoryinternal securityfirewall configurationConfiguring A Linux DMZ: Essential Setup For Secure Networking
(The)Demilitarized zone, used to secure an internal network from external access. You can use Linux firewall to create DMZ easily. There are many different ways to design a network with a DMZ. The basic method is to use a single Linux firewall with 3 Ethernet cards. The following simple example discusses DMZ setup and forwarding public traffic to internal servers. There's a little advanced know-how required here and he recommends a couple good firewalls to set up such functionality just in case this very useful guide doesn't fit the bill. If you are looking to set up a Linux Demilitarized zone a couple of options include EnGarde, IpCop and others. . The link for this article located at is no longer available. . Learn to create a secure Linux DMZ effectively, safeguarding your internal network while managing public-facing services and threats. Linux DMZ, Network Optimization, Firewall Setup, Secure Network, IP Forwarding. . Brittany Day
Dec 17, 2007
•
Firewalls
67
IT managementinternal securityemail encryptionOpenPGP Enhances Internal Email Security For IT Managers
PGP, or Pretty Good Privacy, is a security program that allows users to encrypt and decrypt e-mail, as well as incorporating the added protection of digital signatures for user verification. OpenPGP builds upon PGP with enhanced PGP standards, military-grade security and an increased number of encryption algorithms. Michael W. Lucas, author of PGP & GPG: E-mail for the Practical Paranoid recommends that IT managers take advantage of easy-to-use OpenPGP to add an extra layer of internal security that can prevent tampering from within an organization. The most difficult part is not installation or using OpenPGP but educating users. . OpenPGP puts control of security in the hands of the IT manager. Even if you only use it internally amongst your IT staff, it provides a layer of security that's difficult to achieve otherwise. One common problem in computer security is 'who watches the watchmen?' Your e-mail administrator has the ability to view and edit any e-mail message that passes through the system. When I'm troubleshooting a network problem, I often must use a packet sniffer. At that point, I will see the contents of e-mail messages unless I take specific steps to prevent it. Even your helpdesk staff has access to people's personal data. All of these people can change that data, or even create entirely fraudulent data, files and messages and attribute them to other people. The link for this article located at TechTarget is no longer available. . OpenPGP puts control of security in the hands of the IT manager. Even if you only use it internally . pretty, privacy, security, program, allows, users, encrypt, decrypt, e-mail. . LinuxSecurity.com Team
May 10, 2006
•
Cryptography
74
access controlinternal securityinsider attacksUnderstanding the Risks of Insider Attacks Faced by Organizations Today
For many years external security threats received more attention than internal security threats, but the focus has changed. While viruses, worms, Trojans and DoS are serious, attacks perpetrated by people with trusted insider status—employees, ex-employees, contractors and business partners—pose a far greater threat to organizations in terms of potential cost per occurrence and total potential cost than attacks mounted from outside. The reason insider attacks "hurt" disproportionately is that insiders can and will take advantage of two important rights: trust and physical access. . The link for this article located at CSO Online is no longer available. . The hidden threat of insider risks exposes critical vulnerabilities from trusted individuals within an organization, necessitating increased vigilance to protect sensitive data. Insider Threats, Employee Risks, Security Measures, Access Control. . Benjamin D. Thomas
Apr 13, 2006
•
Network Security
74
intrusion detectioncybersecurityinternal securityFirewalls And IDS Create False Sense Of Internal Security
In an effort to boost sales and generate revenue, one U.S. multinational energy company recently embraced the Internet to bolster external communication and internal collaboration. In addition to creating a corporate web site, the firm deployed hundreds of intranet applications for . . . . In an effort to boost sales and generate revenue, one U.S. multinational energy company recently embraced the Internet to bolster external communication and internal collaboration. In addition to creating a corporate web site, the firm deployed hundreds of intranet applications for procurement, expense reporting and other processes. Numerous departments and branch offices worldwide also set up specialized web sites for partners, customers and even project management. Though the company has achieved its strategic goals for the web, by leveraging valuable communication and management tools that lower costs and streamline processes, it has, unwittingly, set itself up for malicious intrusion. The decentralized and ad hoc intranet application deployment has created a fragmented, multi-platform mosaic that raises important security questions (see boxout below). Clearly for internal or external web applications, security is the biggest concern today. The dramatic number of attacks is expected by CERT to double again this year to almost 100,000. It is estimated by Gartner Group that as many as 70 to 80 percent of these attacks are coming in through ports 80 and 443, commonly used by web applications. Such attacks can be costly and detrimental to corporate credibility. Privileged customer, financial and operational information or valuable intellectual property can be damaged or stolen during the average hacker intrusion of 15 minutes or less. The average loss is more than $2 million among those willing to quantify losses, according to an FBI/CSI survey. Downtime alone can potentially cost tens of thousands of dollars per minute. "There is much more illegal and unauthorized activity going on in cyberspace than corporations admit totheir clients, stockholders and business partners or report to law enforcement. Incidents are widespread, costly and commonplace," the survey concluded. The link for this article located at SCMagazine is no longer available. . Explores how firewalls and intrusion detection systems (IDS) can foster a false sense of security in organizations, despite the growing cyber threat landscape. Network Security,Cyber Threats,Intrusion Detection,Internal Security. . Anthony Pell
Aug 29, 2002
•
Network Security
81
data protectioninternal securityprivacy rightsU.K. Cyberlaws: Assessing Whether Company Data Is An Asset Or Threat
Is your company data an asset or a threat? The issue will be discussed with particular reference to the U.K. Information is a commodity. Indeed, for many companies it's the most valuable asset they possess, especially when it comes to customer relationships. . .. Is your company data an asset or a threat? The issue will be discussed with particular reference to the U.K. Information is a commodity. Indeed, for many companies it's the most valuable asset they possess, especially when it comes to customer relationships . The more a company knows about its customers, the easier it is to reach out and touch them. Now though, governments across Europe are under pressure to develop legislation in response to the growing consensus that businesses should be made accountable for how personal information is stored, used and distributed. Consequently, a raft of new laws have emerged which codify privacy rights for the digital age. The Data Protection Act (DPA) and the Regulation of Investigatory Powers Act (RIPA) are, in the United Kingdom, the first in this new wave of 'cyberlaws' - legislation designed to reinforce privacy rights threatened by the unregulated dissemination of information, in a world where everything from birth records to shopping habits are stored electronically. Much of the thinking behind cyberlaw is so new however, that the majority of companies are unaware it even exists, let alone realize they must now comply. And yet, unless business leaders take formal action to protect the integrity of their data, it could become a major threat rather than an important asset. The link for this article located at SCM is no longer available. . Evaluate your organization's information to determine if it is a valuable asset or a potential risk, especially in light of recent UK cyber laws and privacy regulations. Cybersecurity Legislation, Data Protection Act, Compliance, IT Security. . LinuxSecurity.com Team
Jul 29, 2002
•
Privacy
74
security advisoryinternal securityDDoS protectionTelco Security: Challenges in Internal Network Safeguards and DDoS Risks
Searching for relief from the pressures of abundant capacity and intense competition for their core services, carriers such as WorldCom Inc. and Sprint Corp. are rushing headlong into the managed security services business. But the plans are drawing fire from security experts and customers, who say the carriers should look internally and secure their networks before offering external services. . . .. Searching for relief from the pressures of abundant capacity and intense competition for their core services, carriers such as WorldCom Inc. and Sprint Corp. are rushing headlong into the managed security services business. But the plans are drawing fire from security experts and customers, who say the carriers should look internally and secure their networks before offering external services. Although for years many carriers have employed large staffs of security professionals, most providers still lack basic security safeguards such as DDoS (distributed-denial-of-service) protection on their data networks. Indeed, Telus Corp., a Canadian company, last week became the first North American carrier to install an anti-DDoS system. Preventing and mitigating DDoS attacks is a challenge in that it requires cooperation among the victim, its ISP and, often, the attacker's ISP. But such cooperation is nearly impossible if providers aren't prepared for an attack. The link for this article located at eWeek is no longer available. . Providers face intense rivalry, prompting them to seek outside security solutions while neglecting to fortify their own infrastructures initially.. Telco Security, Network Protection, DDoS Mitigation, Internal Safeguards. . Anthony Pell
May 22, 2002
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!