Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
83
security advisoryinternet attackservice disruptionUltraDNS Major Attack Causes Service Disruption for .info Domains
An Internet attack flooded domain name manager UltraDNS with a deluge of data late last week, causing administrators to scramble to keep up and running the servers that host .info and other domains. The assault sent nearly 2 million requests per second to each device connecting the network to the Internet--many times greater than normal--during the four hours of peak activity that hit the company early Thursday morning, said Ben Petro, CEO of UltraDNS.. . . . An Internet attack flooded domain name manager UltraDNS with a deluge of data late last week, causing administrators to scramble to keep up and running the servers that host .info and other domains. The assault sent nearly 2 million requests per second to each device connecting the network to the Internet--many times greater than normal--during the four hours of peak activity that hit the company early Thursday morning, said Ben Petro, CEO of UltraDNS. "This is the largest attack that we've seen," Petro said. He stressed that it didn't affect the company's core domain name system (DNS) services, but administrators had to work fast to get the attack blocked by the backbone Internet companies from which UltraDNS gets its connectivity. "From a network management perspective, it certainly kept us on our toes," he said. The attack came almost exactly a month after a similar attack targeted the DNS root servers, the databases that hold the critical information computers need to maintain top-level domains. Such domains act as the white pages of the Internet, matching domain names--such as www.cnet.com numerical Internet addresses. The link for this article located at ZDNet is no longer available. . A cyber assault inundated the domain management service UltraDNS with an overwhelming surge of traffic, resulting in significant operational chaos.. UltraDNS Attack, Network Disruption, Domain Name System, Internet Service Outage. . LinuxSecurity.com Team
Oct 16, 2023
•
Hacks/Cracks
74
internet attackdesign flawsecurity riskUnderstanding Clickjacking Threats and Vulnerabilities in Web Development
Read on for info on this new security vulnerability, and learn exactly how it works. Lots of people seem to have an opinion on this article at CNET. Do you see this vulnerability as being a big problem for you? "Most exploits (like worms and attacks that take advantage of holes in software) can be patched, but clickjacking is a design flaw in the way the Web is supposed to work," Grossman said. "The bad guy is superimposing an invisible button over something the user wants to click on...It can be any button on any Web page on any Web site." The technique was used in a series of prank attacks launched on Twitter in February. In that case, users clicked on links next to tweets that said "Don't Click" and then clicked on a button that said "Don't Click" on a separate Web page. That second click distributed the original tweet to all of the Twitter user's followers, thus propagating itself rather quickly. . At the time, Grossman called it a "harmless experiment," but the potential for harm by an attacker who isn't just having fun is huge. In a demo at CNET offices on Thursday, Grossman showed how someone could launch a clickjacking attack using Flash to spy on someone by getting them to turn on their computer Web cam without knowing it. (Grossman also appeared on CNET Live to talk about clickjacking.) The link for this article located at CNET is no longer available. . Recognize the dangers of clickjacking, including how it functions and its implications for online users that undermine standard security protocols.. Clickjacking Risks, Web Exploit Techniques, Design Flaws, Internet Attack Vectors. . Anthony Pell
May 25, 2009
•
Network Security
83
malwareinternet attackcyber threatSignificant Surge in Botnets with 1.2 Million Infected Devices
The number of compromised computers that are part of a centrally controlled bot net has tripled in the past two weeks, according to data gathered by the Shadowserver Foundation, a bot-net takedown group. The weekly tally of bot-infected PCs tracked by the group rose to nearly 1.2 million this week, up from less than 400,000 infected machines two weeks ago. The surge reversed a sudden drop in infected systems--from 500,000 to less than 400,000--last December. . The threat to Internet users from bot nets has steadily increased over the past few years. Increasingly, computer systems in China have become infected with bot software and used to attack or spam other targets, according to the latest Internet Security Threat Report published by Symantec, the owner of SecurityFocus. Spammers have taken a shine to bot nets as a way to reliably send stock-touting e-mail campaigns and other mass mailings of junk advertisements. Worms are rapidly being replaced by Trojan horse programs, such as the misnamed Storm Worm, that use a bot net to spam out more copies of the malicious code. The link for this article located at SecurityFocus is no longer available. . The threat to Internet users from bot nets has steadily increased over the past few years. Increasin. number, compromised, computers, centrally, controlled, tripled. . LinuxSecurity.com Team
Mar 23, 2007
•
Hacks/Cracks
83
security incidentinternet attacknetwork breachUS Systems Breached: Investigators Pursue Widespread Network Attack
The incident seemed alarming enough: a breach of a Cisco Systems network in which an intruder seized programming instructions for many of the computers that control the flow of the Internet. Now federal officials and computer security investigators have acknowledged that the Cisco break-in last year was only part of a more extensive operation - involving a single intruder or a small band, apparently based in Europe - in which thousands of computer systems were similarly penetrated. . Investigators in the United States and Europe say they have spent almost a year pursuing the case involving attacks on computer systems serving the American military, NASA and research laboratories. The break-ins exploited security holes on those systems that the authorities say have now been plugged, and beyond the Cisco theft, it is not clear how much data was taken or destroyed. Still, the case illustrates the ease with which Internet-connected computers - even those of sophisticated corporate and government networks - can be penetrated, and also the difficulty in tracing those responsible. Government investigators and other computer experts sometimes watched helplessly while monitoring the activity, unable to secure some systems as quickly as others were found compromised. The case remains under investigation. But attention is focused on a 16-year-old in Uppsala, Sweden, who was charged in March with breaking into university computers in his hometown. Investigators in the American break-ins ultimately traced the intrusions back to the Uppsala university network. The link for this article located at The New York Times is no longer available. . Investigators in the United States and Europe say they have spent almost a year pursuing the case in. incident, seemed, alarming, enough, breach, cisco, systems, network, which, intruder. . LinuxSecurity.com Team
May 10, 2005
•
Hacks/Cracks
83
network securityincident reportcybersecurityMajor DDoS Attacks Impact Internet Root Servers and Infrastructure
Monday's attack on the 13 computer servers that manage the world's Internet traffic was the first of two assaults, according to officials at the companies that were affected. . .. Monday's attack on the 13 computer servers that manage the world's Internet traffic was the first of two assaults, according to officials at the companies that were affected . Just after 5 p.m. EDT on Monday, a "distributed denial of service" (DDOS) attack struck the 13 "root servers" that provide the primary roadmap for the Internet. The second attack started several hours later and targeted a different kind of Internet server. DDOS attacks are intended to overwhelm networks with data until they fail. The link for this article located at Washington Post is no longer available. . Monday's attack on the 13 computer servers that manage the world's Internet traffic was the first of. monday's, attack, computer, servers, manage, world's, internet, traffic, first. . LinuxSecurity.com Team
Oct 25, 2002
•
Hacks/Cracks
67
security solutioninternet attackddos attackDDoS Attack Resolutions for Schools Offered by Cybersecurity Companies
"While federal investigators continue their hunt for the folks behind the recent denial-of-service attacks that crippled some of the Internet's biggest players, security companies are plying their wares with a vengeance." . . .. "While federal investigators continue their hunt for the folks behind the recent denial-of-service attacks that crippled some of the Internet's biggest players, security companies are plying their wares with a vengeance." The link for this article located at Wired News is no longer available. . Officials investigate those behind the recent cyber attacks, while cybersecurity firms partner with schools to offer blockchain-based solutions. DDoS Attacks, Cybersecurity Education, Crypto Programs, Security Solutions. . LinuxSecurity.com Team
Feb 28, 2000
•
Cryptography
77
denial of servicenetwork securityinternet attackDenial Of Service Attacks' Future Impact On Business Services
Denial of service attacks are a part of life on the Internet. They are generally speaking the easiest attacks to commit since they require minimal skill, only a minimum of knowledge about your intended victim's network, and can be done . . .. Denial of service attacks are a part of life on the Internet. They are generally speaking the easiest attacks to commit since they require minimal skill, only a minimum of knowledge about your intended victim's network, and can be done relatively anonymously. Businesses and their customers are beginning to rely on the availability of corporate web servers to conduct basic business tasks, such as collaborating on projects, retrieving email securely, checking the status of their pension fund, and so on. The deployment of virtual private networking technology, much of it based upon IP Security (IPSec) is also starting to accelerate, making it possible for businesses to link various sites, traveling employees, and customers together securely and cheaply. As people rely more heavily on these services, they will become an attractive target for malicious people, potentially disrupting large numbers of users and services.. Denial of service attacks are a part of life on the Internet. They are generally speaking the easies. denial, service, attacks, internet, generally, speaking, easies. . LinuxSecurity.com Team
Feb 03, 2000
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!