Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 22 articles for you...
83
security advisorydata breachaccount compromiseCCBILL Account Compromise Advisory: User Credentials Threat
As reported by a subscriber to the incidents mailing list at . "It appears that perhaps tens of thousands of username/passwords for valid shell logins ALL ACROSS THE NET may have been compromised at CCBILL, a large internet credit card/check processor used for e-commerce and adult sites, read carefully!!". . . . As reported by a subscriber to the incidents mailing list at . As reported by a subscriber to the incidents mailing list at. reported, subscriber, incidents, mailing, appears, perhaps. . LinuxSecurity.com Team
Mar 24, 2024
•
Hacks/Cracks
83
remote exploitationinternet threatdevice securityGas Stations Across U.S. Expose 5,000 ATGs to Online Security Risks
Over 5,000 devices used by gas stations in the U.S. to monitor their fuel tank levels can be manipulated from the Internet by malicious attackers.. These devices, known as automated tank gauges (ATGs), are also used to trigger alarms in case of problems with the tanks, such as fuel spills.. Over 5,000 automated tank monitors at U.S. fueling stations face potential cyber threats, endangering safety protocols.. automated tank gauges, internet security, remote attacks, gas station safety. . LinuxSecurity.com Team
Jan 23, 2015
•
Hacks/Cracks
83
critical issueexploitsecurity incidentCritical Shellshock Bug: A Serious Internet Exploit Threat
Somehow there always seems to be another Internet security disaster around the corner. A few months ago everyone was in a panic about Heartbleed. Now the bug called Shellshock (officially CVE-2014-6271), a far more serious vulnerability, is running uncontrolled over the Internet. . It's never a good time to panic, but if you're discouraged I don't blame you; I know I am. In retrospect, the grave concern over Heartbleed seems misplaced. As information disclosure bugs go it was a really bad one, but it was only an information disclosure bug and a difficult one to exploit. The sky's the limit on attacks with Shellshock and it's so easy to exploit that it's already being widely-exploited according to research firm Fireeye, which says they have already observed several forms of attack: The link for this article located at ZDNet Blogs is no longer available. . It's never a good time to panic, but if you're discouraged I don't blame you; I know I am. In retros. somehow, there, always, seems, another, internet, security, disaster, around, corner. . LinuxSecurity.com Team
Sep 29, 2014
•
Hacks/Cracks
79
security breachbrowser securitycertificate authorityReassessing Web Browser Security Following Comodo Breach Risk
Major browser makers are beginning to revisit how they handle Web authentication after last month's breach that allowed a hacker to impersonate sites including Google.com, Yahoo.com, and Skype.com.. The efforts are designed to remedy flaws in the odd way Web security is currently handled. Currently, everyone from the Tunisian government to a wireless carrier in the United Arab Emirates that implanted spyware on customers' BlackBerry devices and scores of German colleges are trusted to issue digital certificates for the largest and most popular sites on the Internet. Microsoft's manager for trustworthy computing, Bruce Cowper, told CNET that the company is "investigating mechanisms to help better secure" certificate authorities, which issue trusted digital certificates used to encrypt Web browsing, against this type of attack. The link for this article located at CNET is no longer available. . Initiatives launched to enhance vulnerabilities in online safety protocols following a major cyber breach.. browserSecurity, webAuthentication, certificateAuthorities, internetThreats, securityBreach. . LinuxSecurity.com Team
Apr 04, 2011
•
Security Projects
83
phishinguser awarenessinternet threatTypo-Squatting Risk: Misleading URLs Targeting Pirate Bay Users
For years the Pirate Bay file-sharing index portal has skated on legally thin ice, but now the site. Typo-squatting is the process of registering slightly mis-spelt versions of legitimate websites in the hope that careless internet users will mis-key the site they are looking to access and land on the rogue pages instead. According to Sunbelt Software, this is exactly what is happening to the Pirate Bay, with hackers registering similar names such as http://ww7.piratesbay.org/?usid=27&utid=12146360616 and thpiratebay.org to mention but a few.. Typo-squatting is the process of registering slightly mis-spelt versions of legitimate websites in t. years, pirate, file-sharing, index, portal, skated, legally. . LinuxSecurity.com Team
Sep 27, 2010
•
Hacks/Cracks
83
malwarecyber attackphishingApril 2023 Cyber Threat Report: Surge in Phishing and Malware Attacks
The number of web-based threats soared by nearly two-thirds in April, according to new figures from managed security vendor Network Box. The firm said that the 63 per cent rise in internet threats was due in large part to phishing attacks, which represented one in four of the threats. . Simon Heron, internet security analyst at Network Box, warned that users should be on high alert. "The level of malware has leapt up this spring, and we expect to see a high level of attacks continue," he said. "A poor economy always leads to higher levels of malware aimed at scamming money from victims. Huge increases in social media use, with platforms that are not built primarily with security in mind, also open the door to hackers." The link for this article located at vnunet is no longer available. . Simon Heron, internet security analyst at Network Box, warned that users should be on high alert. 'T. number, web-based, threats, soared, nearly, two-thirds, april, according, figures. . LinuxSecurity.com Team
May 01, 2009
•
Hacks/Cracks
81
phishingscame-crimeExploring Phishing and E-Crime Threats to Internet Users Today
Internet crime often starts with phishing, the practice of duping a user into revealing bank account or log-in credentials via a fraudulent Web site. Phishers send out reams of e-mail bait that say users' account information has expired or needs updating. The e-mail includes links to a site that may look very similar to their bank Web site, but isn't. Once those credentials are obtained, criminals use the information in a variety of creative and costly scams. . "The Web is under attack," said Phillip Hallam-Baker, principal scientist at VeriSign Inc, who gave a session Thursday on Internet crime at the W3C (World Wide Web) conference in Edinburgh, Scotland, this week. The link for this article located at www.infoworld.com is no longer available. . The Internet faces a threat, cautioned Kim Reyes about the rise in cyberattacks and their ramifications on individuals.. E-crime, Phishing Attacks, Internet Threats, Cybersecurity Risks, Credential Theft. . LinuxSecurity.com Team
May 26, 2006
•
Privacy
83
denial of servicemalwarecyber attackMyDoom.ac Attack: Denial of Service on Holocaust History Website
A new version of the MyDoom worm uses subject headings that deny the Holocaust ever happened and launches a denial-of-service (DoS) attack against a Web site that dedicates pages examining the motives of deniers such as British writer David Irving. . . .. A new version of the MyDoom worm uses subject headings that deny the Holocaust ever happened and launches a denial-of-service (DoS) attack against a Web site that dedicates pages examining the motives of deniers such as British writer David Irving. Dubbed MyDoom.ac by Symantec, the variant is a standard MyDoom copy-cat. It arrives as an e-mail message with an attached file which when opened, propagates by hijacking addresses from the compromised PC. It can also spread via file-sharing software such as Kazaa, Morpheus, eDonkey, and Limewire. The link for this article located at TechWeb News is no longer available. . A recently identified variant of MyDoom is now directing denial-of-service strikes at a Holocaust memorial platform, propagating through email communications and file-sharing networks.. MyDoom Worm, Denial of Service, Malware Threat, Cyber Attack, Internet Security. . LinuxSecurity.com Team
Oct 01, 2004
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!