Security Trends 
fedora security assessment
fedora security assessment A Fedora contributor account recently came under scrutiny for apparently AI-generated activity that disrupted the project's bug tracker. . Questionable Bugzilla comments, flawed patches, and improperly closed or reassigned bugs forced maintainers to spend time cleaning up the fallout. There is no evidence that malware was deployed or a backdoor reached production, but the incident exposed a different problem. Open-source projects can be disrupted without compromising a single line of code....
Jun 12, 2026 
Security Vulnerabilities security advisory critical
security advisory critical Attackers are actively exploiting a high-severity vulnerability in Langflow , an open-source platform used to build and run AI workflows. . The flaw turns a file upload into a filesystem write, allowing a user-controlled file to escape the application's intended upload directory and land in locations Langflow was never supposed to touch. The vulnerable upload endpoint permits path traversal through crafted filenames. From there, the impact depends heavily on how the platform is deployed. A...
Jun 11, 2026 
Vendors/Productssecurity advisory linux
security advisory linux With npm v12 , dependency preinstall, install, and postinstall scripts will no longer execute automatically during package installation. Script execution will require explicit approval through new controls such as npm approve-scripts, with the change expected to arrive in July 2026. . The announcement targets a part of the software supply chain that has repeatedly appeared in package registry abuse, credential theft, and CI/CD compromise investigations. A single npm install could trigger code...
Jun 11, 2026 
Security Vulnerabilities security advisory zero-day
security advisory zero-day CISA added CVE-2026-11645 to its Known Exploited Vulnerabilities catalog after Google confirmed active exploitation of the flaw. The bug sits in V8, the JavaScript engine behind Chrome and Chromium. . That's where this gets more interesting. Most coverage will focus on Chrome because that's where the patch landed. But the affected component is V8. Chromium relies on it. Electron relies on it. Plenty of desktop software Linux users interact with every day relies on it too, often without much...
Jun 10, 2026 
Network Securitysecurity advisory networking
security advisory networking For years, IPv4 was the only proxy type that really mattered for anyone running automation off a Linux box. IPv6 was the protocol everyone said they’d migrate to, but almost nobody actually did. In 2026, that’s finally starting to shift. . The problem is that most admins stick with IPv4 out of habit. They know it; it’s what their tooling defaults to, and they don’t see a reason to change. Some are overpaying for addresses they don’t need. Others would quietly break their scrapers, scripts, or...
Jun 09, 2026 
Refine news
X Clear Filters Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found -3 articles for you...
83
security advisorysecurity risksuser awarenessExploiting Jailbroken iPhones: Significant Vulnerabilities from SSH Breach
Apple fans are often smug about their immunity to virus attacks on their Macs and iPhones. Well, these devices are hardly safe from viruses, worms, or other attacks, but it's true that they're more secure than Windows PCs. A recent report from antivirus vendor Intego shows how few attacks made their way into the iPhone and Mac worlds last year.. Except for jailbroken iPhones and iPod Touches -- the mobile devices, ironically, aimed at more sophisticated users who are typically better at erecting security safeguards than the rank-and-file consumer. It turns out, jailbreaking an iPhone -- so you can use a different carrier and run apps that Apple has not approved in its App Store -- disables about 80 percent of the Phone's built-in security features, as hacker Charlie Miller reported at the SyScan security conference. Yikes! And hackers are taking full advantage, Intego reports. A jailbroken iPhone is usually made accessible through an SSH (secure shell) Unix command, which can be invoked over the air, not just when the iPhone is tethered -- part of the jailbreaking process usually involves installing the OpenSSH utility. But few people who jailbreak their iPhones bothered to change the default password, and hackers quickly learned they could scan ports to find OpenSSH and log in to install nefarious software. (For the record, Intego notes that not all networks allow such access; those that use NAT, for example, prevent this kind of phishing.) The link for this article located at InfoWorld is no longer available. . Unauthorized iPhones carry serious security threats; factory SSH configurations can enable malware uploads by cybercriminals.. Jailbroken Devices, Mobile Malware, User Awareness, SSH Exploitation, iPhone Security. . LinuxSecurity.com Team
Jan 28, 2010 •
Hacks/Cracks 78
security advisoryexploitmalwareIkee Worm: Jailbroken iPhones Under SSH Threat by Malware
The Internet prank known as "Rickrolling" has made its way to iPhones in the form of a worm that infects jailbroken versions of the device. The worm is more annoying than harmful -- it even appears to lock the door behind it, preventing similar attacks from slipping in. However, security pros are concerned that a hacker with malicious intentions may exploit the vulnerability the worm highlights.. The Ikee worm exploits the SSH, or secure shell, protocol on jailbroken iPhones. SSH is a network protocol that lets two networked devices exchange data using a secure channel. It is primarily used on Linux- and Unix-based systems to access shell accounts. "The problem is, iPhone users don't think of their devices as being Unix computers," Chester Wisniewski, a senior security adviser at security company Sophos, told MacNewsWorld. "But that's just what it is." The link for this article located at MacNewsWorld is no longer available. . The Xcode malware impacts macOS devices through XcodeGhost, highlighting vulnerabilities even if it appears harmless.. Ikee Worm, SSH Exploit, Jailbroken iPhones, Malware Threat. . LinuxSecurity.com Team
Nov 10, 2009 • Vendors/Products 
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Discover faster search, smarter navigation, and deeper Linux security insights. Read More