Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 119 articles for you...
83
encryptionnational securityrisk assessmentChina: Cyberattack on Telecom Industry Raises Encryption Backdoor Risks
U.S. authorities are on high alert as they investigate an alleged Chinese state-sponsored hack targeting major U.S. telecommunications companies. This attack has reignited debate about encryption backdoors , an ongoing contention among security practitioners. . To help you understand this incident and the security implications of encryption backdoors, I'll discuss these recent attacks, lawmakers' reactions, the role of encryption backdoors in this threat, and why many security professionals—including us at LinuxSecurity.com —oppose their usage. Understanding This Hack Federal authorities have quickly investigated a cyberattack known as Salt Typhoon, linked to China-backed hackers. According to an anonymous U.S. official, these attackers targeted multiple U.S. telecommunications firms, including Verizon, AT&T, and Lumen Technologies. They compromised systems explicitly used by government intelligence collection capabilities such as wiretaps. The implications of this breach extend far beyond corporate walls, posing potential threats to national security. Chinese hackers compromised telecom systems and breached U.S. intelligence systems used for lawful surveillance, such as wiretapping. Investigators are meticulously studying the depth to which hackers have penetrated these networks and whether these criminals have extracted sensitive data. Lawmakers' Reaction to This Incident This incident has sparked significant concern among U.S. lawmakers, with Senator Ron Wyden of Oregon leading the charge by calling upon both the Justice Department and Federal Communications Commission (FCC) to implement stringent security standards for telecom companies' wiretapping systems. He specifically mentioned an outdated regulatory framework as he expressed disappointment over how the DOJ dealt with cyberattacks, which he considered negligent. Wyden suggested setting baseline cybersecurity standards that can be enforced through fines while conducting annual third-party cybersecurity auditsby an independent firm. He also advocated for full transparency regarding data breaches among Congress, investigators, and the public, holding negligent corporations responsible - an approach that signals a shift toward corporate accountability rather than prosecuting foreign hackers who rarely find justice in U.S. court systems. What Are Encryption Backdoors? Encryption backdoors are built into encrypted systems to give authorized authorities access to encrypted data for regulatory or national security reasons. Still, if discovered, they can potentially be exploited by malicious actors. Encryption is at the core of modern cybersecurity, protecting sensitive information from unintended access and modification. Robust encryption protocols also facilitate secure communications, safeguard individual privacy, and enhance national security. Examining the Pros & Cons of Encryption Backdoors Encryption backdoors offer both advantages and drawbacks. On one side, they can improve national security by aiding law enforcement with lawful surveillance operations and efficient investigations by providing necessary access to encrypted data. On the other hand, however, they could threaten national security. Encryption backdoors may help ensure compliance in critical infrastructure sectors like telecom and finance; however, their advantages come with potential drawbacks that should not be ignored. Backdoors introduce inherent vulnerabilities into systems, rendering them insecure without discriminating between good and bad actors. Unauthorized individuals could exploit them to access sensitive data. Recent hacks by China have illustrated how malicious actors can exploit backdoors to access data via backdoors, thus endangering national security and corporate confidentiality. Encryption backdoors can potentially erode public trust in cybersecurity and privacy efforts, discouraging users from adopting encryption technologies. Finally, exploited backdoors may lead to security breaches with substantial financiallosses, legal liabilities, and damage to corporate reputations. What Is the Security Community's Stance on Encryption Backdoors? Security experts have long opposed encryption backdoors as contrary to encryption's very purpose. China-backed hacks prove that backdoors can be dangerous. By exploiting backdoor access mechanisms, hackers can gain entry to systems considered secure by encryption. Leading cybersecurity experts advocate for solid encryption without any backdoors. Vital, unbreakable encryption is critical for protecting against sophisticated cyber threats, ensuring personal privacy, and maintaining national security systems' integrity. Responsible encryption involves designing systems to minimize risks without including backdoors. Our Final Thoughts: The Potential Risks of Encryption Backdoors Outweigh Their Advantages Recent attacks targeting U.S. telecom companies highlight the vulnerabilities posed by encryption backdoors. Although intended for national security and regulatory compliance purposes, backdoors present vulnerabilities that malicious actors can exploit—even state-sponsored hackers—looking for vulnerabilities they can use to breach national security and regulatory compliance. As digital ecosystems mature and cyber threats grow increasingly sophisticated, robust encryption without backdoors remains essential to safeguard sensitive information, maintain personal privacy, and fortify national security systems from unintended access. Instead of compromising encryption standards, policymakers should improve cybersecurity protocols, revise regulatory frameworks, and hold corporations accountable for their security practices. Encryption backdoors may seem beneficial regarding law enforcement and regulatory compliance, yet their inherent risks far outweigh their perceived advantages. This is demonstrated by China-backed hacks, such as those perpetrated against our digital infrastructures by hackers armed with access devices from China. Robust encryption without backdoorsmust be implemented for optimal digital security. . The U.S. investigation into hacking by Chinese operatives raises tensions, impacting corporate regulations, international alliances, and public trust in technology security.. Telecom Cybersecurity, Encryption Backdoors, Cybersecurity Legislation, National Security Issues. . Brittany Day
Oct 16, 2024
•
Hacks/Cracks
82
cyber defensenational securitysoftware securityUS Cyber Contest: AI Enhancing National Security And Software Safeguards
The White House launched a multimillion-dollar cyber contest to use artificial intelligence (AI) to detect and fix security vulnerabilities in the U.S. government's digital infrastructure in response to hackers' growing use of AI. . This strategic endeavor serves as a crucial step in improving national cybersecurity defenses and is a reaction to the rising worry about the harmful use of AI in cyberattacks. "The Linux Foundation's Open Source Security Foundation (OpenSSF), a project under its wing, will play a crucial role in ensuring that the winning software code immediately helps to strengthen the country's most crucial software systems. " . This calculated initiative stands as a vital move towards enhancing the country’s cybersecurity measures and leveraging artificial intelligence.. National Security, AI Cybersecurity, Software Protection, Open Source Solutions. . Brittany Day
Aug 14, 2023
•
Government
82
security advisoryopen sourcenational securityIndia's Ban on Open Source Messaging Apps Sparks FOSS Concerns
India's government has reportedly banned 14 messaging apps on national security grounds, including some open source services. . News of the move appeared in local media last week, citing government sources for news that apps including Element, Wickrme, Mediafire, Briar, BChat, Nandbox, Conion, IMO and Zangi were banned on the recommendation of the Ministry of Home Affairs. The Ministry cited risk of terrorism in the region of Jammu and Kashmir – a majority Muslim territory administered by India but also claimed by Pakistan. India accuses Pakistan of backing independence activists in the region – and imposed years-long connectivity restrictions that meant only 2G services were available – on the grounds that it made it harder for separatists to organize. This latest crackdown targets messaging apps India reportedly believes could be used by separatists to plan attacks without authorities being able to intercept their chatter. That's the logic India nearly always uses – indeed, that just about any government uses – when shuttering networks or banning content and apps. But the Free Software Community of India – a collective of FOSS users and developers – has taken issue with the banning of peer-to-peer open source messaging apps Briar and Element. The Community cited reports that India banned the two services because they do not have in-country representatives who can be held legally accountable for activity conducted with the apps. It points out that's a slightly ridiculous position given FOSS relies on decentralized collaboration. . News of the move appeared in local media last week, citing government sources for news tha. india's, government, reportedly, banned, messaging, national, security, grounds. . Brittany Day
May 12, 2023
•
Government
82
open sourcenational securityLinux kernelDARPA's Concerns Over Trust in Open Source Software for National Security
Open-source code runs on every computer on the planet—and keeps America’s critical infrastructure going. DARPA is worried about how well it can be trusted. . It’s not much of an exaggeration to say that the whole world is built on top of the Linux kernel—although most people have never heard of it. It is one of the very first programs that load when most computers power up. It enables the hardware running the machine to interact with the software, governs its use of resources, and acts as the foundation of the operating system. It is the core building block of nearly all cloud computing, virtually every supercomputer, the entire internet of things, billions of smartphones, and more. . Collaborative software drives essential networks globally, leading the NSA to explore security credibility.. Open Source Trust, Linux Foundation, DARPA Infrastructure, Critical Software, Software Security. . Brittany Day
Jul 14, 2022
•
Government
78
security advisorylinux supportnational securityCloudLinux TuxCare: Automated Security for Atlas V Rocket Launches
CloudLinux TuxCare Linux enterprise support services provide automated security patches and updates for the systems supporting the Atlas V rocket, supporting Department of Defense and Space Force missions to protect U.S. National Security. . “Protecting U.S. national security means having the ability to launch important payloads into space. TuxCare from CloudLinux is proud to do our part to support the Department of Defense and the Space Force by providing critical security patches for ULA’s Atlas V rocket,” said Jim Jackson, president and CRO of CloudLinux. Last week, the United Launch Alliance (ULA) Atlas V rocket launched SBIRS GEO Flight 5, the fifth flight of Space Based Infrared System (SBIRS) Geosynchronous Earth Orbit. The U.S. Space Force Space and Missile Systems Center mission will send new satellites to join the SBIRS constellation, which works to detect missile detection and early warning satellites for the United States and its allies. . SkyShield by CloudFort streamlines critical updates for ULA’s Falcon 9 spacecraft, boosting defense capabilities for the nation.. TuxCare Services, CloudLinux Solutions, National Defense Support, Enterprise Linux Support. . LinuxSecurity.com Team
May 25, 2021
•
Vendors/Products
82
cybersecuritynational securitygovernment cooperationExploring AI's Role In National Security And Government Partnerships
America’s national security depends on the government getting access to the artificial intelligence breakthroughs made by the technology industry.So says areportsubmitted to Congress on Monday by the National Security Commission on Artificial Intelligence.It also warns that AI-enhanced national security apparatus like autonomous weapons and surveillance systems will raise ethical questions. Learn more in an interesting Wired article: . The group, which includes executives from Google, Microsoft, Oracle, and Amazon, says the Pentagon and intelligence agencies need a better relationship with Silicon Valley to stay ahead of China. “AI adoption for national security is imperative,” said Eric Schmidt, chair of the commission and formerly CEO of Google, at a news briefing Monday. “The private sector and government officials need to build a shared sense of responsibility.” Monday’s report says the US leads the world in both military might and AI technology. It predicts that AI can enhance US national security in numerous ways, for example by making cybersecurity systems, aerial surveillance, and submarine warfare less constrained by human labor and reaction times. The link for this article located at Wired is no longer available. . Leaders within prominent technology firms emphasize the importance of partnership with the Department of Defense regarding artificial intelligence for safeguarding national interests.. National Security, AI Collaboration, Cybersecurity Innovations. . Brittany Day
Nov 06, 2019
•
Government
82
legislationnational securitydata privacyEncryption Legislation Agreement on Serious Offenses by Coalition and Labor
New national security laws dealing with encrypted communications are likely to pass Parliament by the end of the week, as Labor and the government have come to an in-principle agreement on key parts of the Bill after a series of concessions from the Coalition.. "The changes include limiting the application of the powers in this bill to only serious offences, properly defining key terms in the bill, and requiring a 'double-lock' authorisation process for Technical Capability Notices, " Shadow Attorney-General Mark Dreyfus said on Tuesday. The link for this article located at ZDNet is no longer available. . Upcoming legislative measures regarding encryption aimed at addressing grave infractions in communication are poised for imminent approval by Parliament.. Encryption Laws, National Security Legislation, Data Privacy. . Brittany Day
Dec 04, 2018
•
Government
82
legislationnational securityHomeland SecurityCISA Act: New Federal Cybersecurity Agency Approved By Congress
A bill that seeks to reorganize the US Department of Homeland Security's National Protection and Programs Directorate (NPPD) into a new cybersecurity agency has cleared Congress and is now headed to President Trump's desk for his signature.. The Cybersecurity and Infrastructure Security Agency Act - which passed the Senate in October and the US House of Representatives this week - essentially re-designates NPPD as the Cybersecurity and Infrastructure Security Agency (CISA). The link for this article located at DarkReading is no longer available. . The Cybersecurity and Infrastructure Security Agency Act - which passed the Senate in October and th. seeks, reorganize, department, homeland, security's, national, protection. . Brittany Day
Nov 18, 2018
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!