Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 0 articles for you...
83
security breachdata exposuremalware researchKorBanker Malware: Google & Facebook ID Exposure on Command Server
Text messages containing VPN passwords and authentication codes for Google and Facebook are found on a command-and-control server for Android malware. Research on Android malware called KorBanker has uncovered a treasure trove of text messages that include authentication codes for Google and Facebook and VPN passwords. How the thieves made use of the data is not known. However, FireEye researcher Hitesh Dharmdasani assumes cybercriminals have figured out a way to exploit it for financial gain. The link for this article located at CSO Online is no longer available. . The malicious software known as KorBanker for Android compromises personal data by revealing confidential messages that involve authentication tokens for services like Google and Facebook.. KorBanker Malware, Android Malware Attack, Data Exposure. . LinuxSecurity.com Team
Sep 05, 2014
•
Hacks/Cracks
83
IT securitycyber threatexploit kitNew Cyber Threats Rising Following Arrest of Blackhole Hacker
Security researchers Tuesday said reports of the arrest of the hacker behind Blackhole, one of the most widely used exploit kits on the Internet, is good news for IT operations and users. But it shouldn't be long before another hacker takes his place.. "[It's] is a big deal," said Mikko Hypponen, chief research officer at security firm F-Secure. "According to our statistics, Paunch has been the biggest provider of exploit packs for the past two years." The link for this article located at Network World is no longer available. . '[It's] is a big deal,' said Mikko Hypponen, chief research officer at security firm F-Secure. 'Acco. security, researchers, tuesday, reports, arrest, hacker, behind, blackhole. . LinuxSecurity.com Team
Oct 09, 2013
•
Hacks/Cracks
83
threat analysissecurity analysisrootkit detectionExploring Kernel Malware and Rootkit Threats: F-Secure Insights
Security analysts have been predicting that kernel rootkits, which cloak their activity by replacing a portion of a program's software kernel with modified code, are expected to continue to grow in frequency in 2007. While rootkit-fighting technologies such as the PatchGuard kernel protection system built into 64-bit versions of Microsoft's new Windows Vista operating system are arriving, most PC users will still be left open to the attacks over the next twelve months, CA has said, and even experienced PC users are vulnerable to their sophisticated techniques. . F-Secure Security Labs has been tracking and dissecting kernel malware for years; this form of attack was first spotted as far back as 1999, in the form of the WinNT/Infis attack. F-Secure researcher Kimmo Kasslin has made the findings available in a paper titled "Kernel Malware: The Attack from Within" (a PDF) as well as in a slide show (also a PDF). The link for this article located at eweek is no longer available. . F-Secure Security Labs has been tracking and dissecting kernel malware for years; this form of attac. security, analysts, predicting, kernel, rootkits, which, cloak, their, activity, replacing. . LinuxSecurity.com Team
Feb 26, 2007
•
Hacks/Cracks
82
cyber threatsinternet securitymalware researchNSF Grants $12M for Internet Centers on Cyber Security Research
The National Science Foundation announced Tuesday that it has granted more than $12 million to academic researchers for the creation of two centers to investigate infectious code and study the Internet's ecology. . . .. The funds set aside for the centers are part of the NSF's Cyber Trust program, through which the foundation has granted a total of $30 million to 33 projects focused on researching ways to provide better information security. The Center for Internet Epidemiology and Defenses, or the CIED, will work to understand how digital diseases such as worms and viruses spread across the Internet, and how epidemics can be defeated. The Security Through Interaction Modeling, STIM, Center will draw parallels with nature's ecology to understand the complex interaction between machines, humans and cyberattacks. "These centers, as well as our other funded activities, are looking not only for new ways to cope with imperfections in today's systems but also for the knowledge and techniques to build better systems in the future," Carl Landwehr, the NSF's program director for Cyber Trust, said in a statement. The link for this article located at Robert Lemos CNET News.com is no longer available. . The funds set aside for the centers are part of the NSF's Cyber Trust program, through which the fou. national, science, foundation, announced, tuesday, granted, million, acade. . Anthony Pell
Sep 22, 2004
•
Government
83
security threatmalware researchlinux malwareExploring Slapper and Scalper Unix Worms and Linux Security Threats
Fueled by the old myth that "you can't get a virus in Unix" and by the increasing popularity of Linux and FreeBSD, Unix viruses passed an important milestone in 2001 and continued by receiving even more attention during 2002. . .. Fueled by the old myth that "you can't get a virus in Unix" and by the increasing popularity of Linux and FreeBSD, Unix viruses passed an important milestone in 2001 and continued by receiving even more attention during 2002 . It all begun with the Ramen worm, then continued with Adore, Lion, Cheese, RST.B and many, many more. Some of them even became widespread, culminating with the inclusion of OSF.8759 in the May 2002 Wildlist Unfortunately, while there are lots of charts and distribution statistics available for Win32 viruses, the same cannot be said about Unix viruses. Actually, at the time of writing, there is no reliable (and constantly updated) source of information regarding the distribution of Linux/FreeBSD malware, not to mention other Unix flavors which are less appealing to virus writers. The link for this article located at SecurityFocus is no longer available. . The belief in Unix’s strong immunity fostered a false security among users, encouraging worm exploits that highlighted vulnerabilities and spurred security dialogues in Linux.. Unix Worms, Linux Malware, Virus Myths, Security Threats, Worm Tracking. . LinuxSecurity.com Team
Feb 04, 2003
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!