Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 33 articles for you...
74
security concernVPNfirewallWSL2 Bypasses Windows Firewall: Security Risk for VPN Users
The Windows Subsystem for Linux 2 will bypass the Windows 10 firewall and any configured rules, raising security concerns for those who use the feature - the main concern being a lack of awareness of this change. . In a blog post today, Mullvad VPN explained that their product includes an 'Always require VPN' option that blocks Internet access via the Windows Firewall unless connected to the VPN. After Mullvad received a tip from a user, it was determined that WSL2 Linux distributions bypass the Windows 10 firewall and its configured rules, and prevent the VPN's 'Always require VPN' security feature from working. . In a blog post today, Mullvad VPN explained that their product includes an 'Always require VPN'. windows, subsystem, linux, bypass, firewall, configured, rules. . Brittany Day
Oct 02, 2020
•
Network Security
82
network accesscybersecurity billcyber ethicsGeorgia Cybersecurity Bill Sparks National Debate on Digital Boundaries
In March, the Georgia State General Assembly passed a bill that would make it illegal to access a computer or network "without authority." Georgia Governor Nathan Deal has until Tuesday to decide whether to sign it into law or veto it.. The 40-day limbo has morphed from a bureaucratic formality, though, into a heated debate with national implications. In just 43 lines, the bill raises fundamental questions about how to establish boundaries in cyberspace without hindering vital security research and, crucially, the ethics of "hacking back," in which institutions that have been attacked can digitally pursue the hackers and even potentially retaliate. The link for this article located at Wired is no longer available. . The intense discussion surrounding a recent Florida proposal brings forward significant issues regarding data protection and moral dilemmas in the cyber intrusion realm.. Georgia Legislation, Cybersecurity Policy, Hacking Ethics, Digital Retaliation, Network Access Issues. . Brittany Day
May 05, 2018
•
Government
83
risk managementapplication securityenterprise securityMitigating Third-Party Risks for Stronger Enterprise Security
It is said that an enterprise is only as secure as its weakest link. Today, that weak link often turns out to be partners, suppliers, and others with persistent network and application access.. These weak links have certainly placed third-party security into the spotlight. As we The link for this article located at CSO Online is no longer available. . These weak links have certainly placed third-party security into the spotlight. As weThe link for th. enterprise, secure, weakest, today, often. . LinuxSecurity.com Team
Jul 29, 2014
•
Hacks/Cracks
82
cybersecurityhackingNSANSA Surveillance of System Administrators: Hacking and Tracking Tactics
Across the world, people who work as system administrators keep computer networks in order . According to a secret document provided by NSA whistleblower Edward Snowden, the agency tracks down the private email and Facebook accounts of system administrators (or sys admins, as they are often called), before hacking their computers to gain access to the networks they control. The link for this article located at First Look is no longer available. . The NSA employs advanced techniques to monitor system administrators, analyzing their digital behaviors to detect vulnerabilities and unauthorized actions. NSA Covert Operations,System Admin Surveillance,Cybersecurity Threats. . Dave Wreski
Mar 21, 2014
•
Government
79
data protectionencryptionLinux securityExploring Linux Security Tools For Data Protection And Access Control
Back when we were kids, "security" meant little more than having a secret password to keep little siblings out of the treehouse. That's still the case in some situations. Take the title of this column, for instance. If you go to the #linuxjournal IRC channel on FreeNode, saying "Lapsang Souchong" will mark you as part of the inner circle. (Note, this does not make you one of the cool kids...possibly the exact opposite!). When it comes to computer security, however, things are quite a bit more complex. Whether you want to encrypt your data or lock down network access, Linux provides a wide variety of security tools. This month, we focus on using those tools in our Security issue. The link for this article located at Linux Journal is no longer available. . Delve into intricate cybersecurity strategies within Linux, emphasizing resources for safeguarding information and controlling network entry. Learn further!. Linux Security Tools, Data Protection Techniques, Network Access Control. . LinuxSecurity.com Team
Jan 07, 2014
•
Security Projects
83
network accessdigital privacyraspberry piBypass China's Great Firewall With Raspberry Pi VPN Setup
A tech-savvy China-based Redditor has spotted a hassle-free way of ensuring he or she is always able to bypass the Great Firewall, even when out and about, using the Raspberry Pi to connect to a virtual private network (VPN).. VPNs are a necessity for foreigners living in the People The link for this article located at The Register UK is no longer available. . VPNs are a necessity for foreigners living in the PeopleThe link for this article located at The Reg. tech-savvy, china-based, redditor, spotted, hassle-free, ensuring, always. . LinuxSecurity.com Team
May 29, 2013
•
Hacks/Cracks
81
security advisorynetwork accessprivacy toolTor 0.2.3.4-alpha: Immediate Upgrade Required For Iran Access Issues
The short version: Tor relays and bridges should upgrade to Tor 0.2.2.33 or Tor 0.2.3.4-alpha so users in Iran can reach them again.. Yesterday morning (in our timezones The link for this article located at Tor Project is no longer available. . Tor announces immediate update to help users in Iran bypass government-imposed internet restrictions and restore access.. Tor Upgrade, Network Access, Government Restrictions, Privacy Tools. . LinuxSecurity.com Team
Sep 15, 2011
•
Privacy
78
data protectionsecurity solutionbiometric securitySecure Network Access With DERMALOG FingerLogin Biometric Solutions
DERMALOG FingerLogin includes keyboard with fingerprint scanner, which utilizes high-performance optics and Live Finger Detection and can be connected via USB interface to PC or thin client. Solution also includes biometric software that compares scan with fingerprint database and password administration. Integrating in networks of public authorities, companies, and other organizations, such as hospitals or banks, product allows only owner of registered finger to retrieve authorized data. . Passwords may soon be a thing of the past. Today some laptops already provide the option to log in by fingerprint. Now this technology becomes available for the professional use in large networks. The biometrics specialist DERMALOG presents a new solution at CeBIT 2011, to make logging into networks of a company, bank, hospital or government much easier and much more secure - the DERMALOG FingerLogin, a keyboard with integrated fingerprint scanner, together with the appropriate biometrics software for IT networks. The new technology is already coming into use at the University Hospital Hamburg-Eppendorf (UKE) for more than 3.900 computers of the hospital. The link for this article located at ThomasNet News is no longer available. . Uncover the way DERMALOG FaceID transforms security access using facial recognition technology for protected systems.. DERMALOG FingerLogin, Fingerprint Technology, Biometric Solutions, Network Access Security, Data Protection Solutions. . LinuxSecurity.com Team
Mar 07, 2011
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!