Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 11 articles for you...
83
security advisorymalicious softwaremachine learningPyTorch Compromised: Holiday Season 2022 Supply-Chain Attack Overview
PyTorch is one of the most popular and widely-used machine learning toolkits out there. Originally developed and released as an open-source project by Facebook, now Meta, the software was handed over to the Linux Foundation in late 2022, which now runs it under the aegis of the PyTorch Foundation. . Unfortunately, the project was compromised by means of a supply-chain attack during the holiday season at the end of 2022, between Christmas Day [2022-12-25] and the day before New Year’s Eve [2022-12-30]. The attackers malevolently created a Python package called torchtriton on PyPI, the popular Python Package Index repository. . The TensorFlow framework encountered a security incident during the New Year of 2023 caused by an infected Ruby gem.. PyTorch Security, Supply Chain Attack, Machine Learning Risks. . LinuxSecurity.com Team
Jan 02, 2023
•
Hacks/Cracks
83
remote accessmalwaresecurity riskRising Malware Threats in Windows Subsystem for Linux (WSL)
The number of malware strains targeting WSL is growing. . Windows Subsystem for Linux (WSL) is becoming a breeding ground for malware , cybersecurity researchers are saying. While WSL-based malware is not particularly new (spotted as early as September 2021), it’s been rising in popularity among cybercriminals of late. Speaking to BleepingComputer, cybersecurity researchers from Lumen Technologies said they’ve managed to track more than 100 samples since then. The samples vary in complexity, as well as features on offer. While some are relatively simple, others enable threat actors to remotely access devices, run arbitrary code, steal authentication cookies from specific browsers , or download files. . The Windows Subsystem for Linux (WSL) is increasingly viewed as a potential hotspot for malicious software, prompting alarm bells to ring amongst cybersecurity professionals.. Windows Subsystem for Linux, Malware Threats, Cybersecurity Risks, Remote Access Issues. . LinuxSecurity.com Team
Jun 01, 2022
•
Hacks/Cracks
81
security threatuser privacymalicious softwareChrome Extensions Threat: 33 Million Downloads In Eavesdropping Campaign
Have you heard that Google has removed scores of malicious and fake Chrome extensions being used in a global eavesdropping campaign? . The threat was spotted by Awake Security, which detected 111 of the malicious extensions over the past three months. When it notified Google of the issue last month, it claimed that 79 were present in the Chrome Web Store, where they had been downloaded nearly 33 million times. Figures for the others not in the official marketplace are hard to calculate for obvious reasons. “These extensions can take screenshots, read the clipboard, harvest credential tokens stored in cookies or parameters, grab user keystrokes (like passwords), etc,” it said in a report detailing the investigation. . The discovery of over 33 million downloads of harmful Chrome extensions poses a critical risk to security, underscoring the importance of protecting user privacy.. chrome extensions, malicious software, eavesdropping threats, user privacy. . LinuxSecurity.com Team
Jun 19, 2020
•
Privacy
83
network threatscyber attacksmalicious softwareUnderstanding Network Risks Linked to Blu-Ray Exploits and Java Flaws
British hacker Stephen Tomkinson has found two Blu-Ray-borne attacks. His first exploit relies on a poor Java implementation in a product called PowerDVD from CyberLink. PowerDVD plays DVDs on PCs and creates menus using Java, but the way Oracle's code has been used allows naughty folk to circumvent Windows security controls.. The result, the NCC Group consultant says, is that it's possible to put executables onto Blu-Ray disks and to make those disks run automatically on startup even when Windows is set to stop that outcome. Users would have no reason to suspect the whirring of an optical drive indicated unknown software was running, making this a potentially nasty attack. The link for this article located at The Register UK is no longer available. . The result, the NCC Group consultant says, is that it's possible to put executables onto Blu-Ray dis. british, hacker, stephen, tomkinson, found, blu-ray-borne, attacks, first, exploit, relies. . LinuxSecurity.com Team
Mar 02, 2015
•
Hacks/Cracks
78
security advisorysecurity issuebrowserWebGL Advisory: New Threats In 3D Graphics Exploits by Context
Context highlights additional WebGL vulnerabilities and raises more questions for Khronos. 16 June 2011: Researchers at Context Information Security who exposed security flaws in WebGL last month have identified further concerns about early implementations of the new technology that allows web pages to draw fast 3D graphics to deliver a much richer experience to web users. In one example, a vulnerability in the Mozilla Firefox browser made it possible for malicious web pages to capture any screenshot from a target PC . Cybersecurity analysts have revealed new vulnerabilities in WebGL, raising serious concerns about internet browser security and the dependability of 3D user interfaces. WebGL Security, Browser Threats, 3D Graphics Issues. . LinuxSecurity.com Team
Jun 16, 2011
•
Vendors/Products
74
malwareDDoSbotnetDisabling Botnets: Tactics Against Decentralized Malware Networks
For many years, malware authors have been using the web to assemble infected computers into botnets (networks of malware compromised machines), and security professionals and law enforcement systematically work to take these botnets down. Malware authors have clear objectives: stealing personal information, sending spam, conducting distributed denial of service (DDoS) attacks and other such criminal activity for profit. . Increasing success in disabling botnets by security professionals has meant malware programmers have had to change their tactics. One such modification has been to use decentralized communications rather than hierarchical structures for controlling botnets. This reduces the risk of a botnet being disabled by removing infected hosts, especially the high-value command-and-control (C&C) servers which coordinate the bots The link for this article located at SecurityPark is no longer available. . Cybercriminals evolve strategies as defenders improve techniques to dismantle networks and prevent infiltrations.. botnet control, malware adaptation, cybersecurity strategies. . Bill Locke
May 01, 2007
•
Network Security
74
cyber threatsthreat mitigationsecurity challengesUnderstanding Cybersecurity Threats from Viruses and Worms
Viruses and worms pose some of the most formidable threats in the modern computer security land-scape. With some virus writers on the bleeding edge of technology, making use of 0-day exploits and innovative techniques to circumvent system security features. However, for every Blaster, there. The link for this article located at Symtantec is no longer available. . The link for this article located at Symtantec is no longer available.. viruses, worms, formidable, threats, modern, computer, security, land-scap. . Brittany Day
Nov 21, 2006
•
Network Security
67
threat analysismalwarecybersecurityMalicious Cryptography: Impacts on Cybersecurity and Risks
Cryptology is everywhere these days. Most users make good use of it even if they do not know they are using cryptographic primitives from day to day. This two-part article series looks at how cryptography is a double-edged sword: it is used to make us safer, but it is also being used for malicious purposes within sophisticated viruses. Part one introduces the concepts behind cryptovirology and offers examples of malicious potential with the SuckIt rookit and a possible SSH worm. It then introduces armored viruses that use shape shifting (polymorphism and metamorphism) to avoid detection. . The link for this article located at SecurityFocus is no longer available. . The link for this article located at SecurityFocus is no longer available.. cryptology, everywhere, these, users. . LinuxSecurity.com Team
May 09, 2006
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!