Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
83
malwarevulnerabilitysecurity breachCyber Attack on WordPress Sites Hits DreamHost GoDaddy Bluehost
According to various reports, in the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. . Unconfirmed reports by WPSecurityLock suggest that other PHP-based management systems, such as the Zen Cart eCommerce solution, have also been targeted. The hacked web pages appear to have been infected with scripts, which not only install malware on users' systems, but also prevent browsers like Firefox and Google Chrome, which use Google's Safe Browsing API, from issuing an alert when users try to access the page. When Google's search bot encounters such a specially crafted page, the page responds by simply returning harmless code. This camouflage strategy takes advantage of the browser switch normally used by developers to return browser specific code to suit functional variations in different browser, such as Internet Explorer and Firefox. The link for this article located at H Security is no longer available. . Widespread cyber attacks have targeted Joomla platforms hosted on various service providers, raising alarm about potential vulnerabilities.. WordPress Security, Malware Attack, Web Exploitation, ISP Threat, PHP Exploitation. . LinuxSecurity.com Team
May 10, 2010
•
Hacks/Cracks
74
network threatssecurity measuresinternet service providerFTC and International Partners Tackle Remote-Controlled Spam Threats
Remote-controlled "zombie" networks operated by bottom-feeding spammers have become a serious problem that requires more industry action, the Federal Trade Commission is expected to announce on Tuesday. . The FTC and more than 30 of its counterparts abroad are planning to contact Internet service providers and urge them to pay more attention to what their customers are doing online. Among the requests: identifying customers with suspicious e-mailing patterns, quarantining those computers and offering help in cleaning the zombie code off the hapless PCs. To be sure, computers infected by zombie programs and used to churn out spam are a real threat to the future of e-mail. One report by security firm Sophos found that compromised PCs are responsible for 40 percent of the world's spam--and that number seems to be heading up, not down. But government pressure--even well-intentioned--on Internet providers to monitor their users raises some important questions. Will ISPs merely count the number of outbound e-mail messages, or actually peruse the content of e-mail correspondence? E-mail eavesdropping is limited by the Electronic Communications Privacy Act in the United States, but what about other countries without such laws? If these steps don't stop zombie-bots, will the government come back with formal requirements instead of mere suggestions the next time around?. Regulatory bodies are addressing fraudulent networks and highlighting the vital position of internet service providers in protecting consumers.. Spam Network Management, Botnet Defense, FTC Guidelines. . Brittany Day
May 23, 2005
•
Network Security
74
security advisorynetwork securityinternet service providerInsecure Networks at Seattle's Westin Building Cause Major Risks
The major Internet backbone networks for the Pacific Northwest converge at a single location: the Westin building in Seattle, a 32-story structure that houses dozens of major and minor Internet service providers. It is also home to more than 50 . . . . The major Internet backbone networks for the Pacific Northwest converge at a single location: the Westin building in Seattle, a 32-story structure that houses dozens of major and minor Internet service providers. It is also home to more than 50 wireless networks, most of which apparently have no security. "The Westin building is the Northwest nexus for all the fiber. Everyone who is anyone is colocated there," said Josh Pennell, CEO and principal consultant for Seattle security firm IOActive, who recently visited his company's servers at the site. "You can think about the mayhem that people can cause by getting onto that. It's pretty scary stuff." The link for this article located at News.com is no longer available. . Unsafe network configurations within the Westin building in Seattle create significant risk exposure for service vendors.. Westin Building, Network Liability, Internet Security. . Anthony Pell
Jul 01, 2002
•
Network Security
83
cyber attacksecurity breachinternet service providerCloudNine Communications ISP Cyber Attack Leads To Business Closure
Fears are growing once more that companies operating on the Internet may not be equipped to ward off electronic sabotage after anonymous "hackers" forced a small British firm out of business. CloudNine Communications, one of Britain's oldest Internet Service Providers (ISPs) . . . . Fears are growing once more that companies operating on the Internet may not be equipped to ward off electronic sabotage after anonymous "hackers" forced a small British firm out of business. CloudNine Communications, one of Britain's oldest Internet Service Providers (ISPs) shut down last week with the loss of eight jobs in what computer experts believe is the first instance of a company being hacked out of existence. The link for this article located at CNN.com is no longer available. . Fears are growing once more that companies operating on the Internet may not be equipped to ward off. fears, growing, companies, operating, internet, equipped. . LinuxSecurity.com Team
Feb 03, 2002
•
Hacks/Cracks
83
internet service providerfree speechonline activismVerio Resists MPAA Pressure: A Bold Stand for Free Speech Online
In a move that free-speech activists hope will be trendsetting, Internet service provider Verio is standing up to the movie industry by refusing to remove a Web site the Motion Picture Association of America says is illegal. Many ISPs, especially smaller . . . . In a move that free-speech activists hope will be trendsetting, Internet service provider Verio is standing up to the movie industry by refusing to remove a Web site the Motion Picture Association of America says is illegal. Many ISPs, especially smaller ones that don't have large legal departments, yank sites immediately after receiving threatening letters from content providers to avoid liability. But Verio, a unit of NTT Communications that hosts more than 400,000 Web sites, is raising the bar for site closures by refusing to buckle under MPAA pressure. The link for this article located at USA Today is no longer available. . In a move that free-speech activists hope will be trendsetting, Internet service provider Verio is s. free-speech, activists, trendsetting, internet, service, provider, verio. . LinuxSecurity.com Team
Jan 28, 2001
•
Hacks/Cracks
74
data protectioncyber threatweb attackWeb Attacks Raise Questions On ISP Data Protection Role
Robert Lemos writes... "Security experts and Internet users are becoming increasingly vocal about their concerns that high-speed Internet providers are not doing enough to ensure the data security of home users." ...but, someday we will realize that security is everyones . . .. Robert Lemos writes... "Security experts and Internet users are becoming increasingly vocal about their concerns that high-speed Internet providers are not doing enough to ensure the data security of home users." ...but, someday we will realize that security is everyones responsibility. The link for this article located at Robert Lemos, ZDNet - Â is no longer available. . Fears escalate regarding ISPs' responsibility in safeguarding household data as online threats intensify.. Data Security, Internet Providers, User Protection, Threat Management. . Anthony Pell
Feb 22, 2000
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!