Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 33 articles for you...
74
security toolsLinux toolspenetration testingBest Wi-Fi Penetration Testing Tools for Securing Linux Networks
Protecting your wireless networks from infiltrators is critically important in keeing your Linux environment secure! Check out these eight great wireless hacking tools for Linux. . Wi-Fi penetration tools aid cybersecurity analysis by delving deeper into the details of the security framework. Before hackers use these tools to infiltrate your system, it is a wise decision to examine your network for any such vulnerabilities. For this purpose, many organizations are beginning to use Wi-Fi penetration testing tools to uncover the vulnerabilities on their wireless networks. Read on to know some of the potent and popular Wi-Fi penetration tools. . Explore the leading 8 Wi-Fi intrusion detection software tools designed to fortify your Linux setup against wireless vulnerabilities.. Wireless Network Testing, Penetration Tools, Linux Security Tools. . Brittany Day
Sep 20, 2021
•
Network Security
79
Ubuntuopen-sourcesecurity scannerInstall SpiderFoot Security Scanner on Ubuntu 20.04 for Enhanced Security
Learn how to install SpiderFoot - an excellent open-source security scanner - to analyze vulnerabilities and malicious functions on Ubuntu Linux servers and assist in your pentesting endeavors in this tutorial. . Spiderfoot is a free and open-source vulnerability testing tool that helps you to reduce attacks by hackers. It is used to analyze vulnerabilities and malicious functions on Linux servers. It is a cross-platform software tool that supports Linux and Windows machines and can be collaborated with GitHub. It is written in Python and uses SQLite as a database backend. It provides a web-based interface to perform penetration testing for more than one target simultaneously through a web browser. In this tutorial, we will show you how to install Spiderfoot on Ubuntu 20.04 server. . Set up SpiderFoot, the free-to-use vulnerability detection tool for scrutinizing security flaws on Ubuntu Linux systems. Boost your protection.. SpiderFoot Installation, Vulnerability Testing, Open-Source Scanner, Ubuntu Security. . LinuxSecurity.com Team
Apr 02, 2021
•
Security Projects
77
cybersecurity insightnetwork analysisDNS securityDiscover Nominet's Turing Tool For DNS Traffic Visualization
UK domain registrar Nominet has shown off a striking new visualisation tool called . In development for four years, and used internally by Nominet for the last two, at core turing is about representing DNS traffic in visual form, allowing administrators to The link for this article located at TechWorld is no longer available. . Nominet's Turing application illustrates DNS activity to uncover concealed security vulnerabilities and improve administrative understanding.. DNS Visualization, Cybersecurity Tool, Security Insights, Network Analysis. . LinuxSecurity.com Team
Jun 11, 2015
•
Server Security
79
security toolspenetration testingnetwork analysisExplore Kali Linux For Effective Pen Testing And Password Cracking
Popular Wi-Fi password cracking tool Backtrack . The Kali distribution includes Metasploit, Wireshark, John the Ripper, Nmap, Aircrack-ng, and others to provide a security testing suite you can easily boot up from a Live CD. The distribution comes in not only 32- and 64-bit flavors, but also works with ARM-based systems as well. That means Kali can run on some Chromebooks and even the Raspberry Pi. Check out the Kali site for the official downloads and more information.. Kali Linux provides resources such as Nmap and Burp Suite for efficient vulnerability assessments and network monitoring.. Kali Linux, Penetration Testing Tools, Password Cracking Techniques. . LinuxSecurity.com Team
Mar 13, 2013
•
Security Projects
81
network analysistraffic shapingprivacy toolDisguising Tor Traffic as Skype Video Calls with SkypeMorph
To prevent the Tor traffic from being recognized by anyone analyzing the network flow, SkypeMorph uses what's known as traffic shaping to convert Tor packets into User Datagram Protocol packets, as used by Skype. The traffic shaping also mimics the sizes and timings of packets produced by normal Skype video conversations. As a result, outsiders observing the traffic between the end user and the bridge see data that looks identical to a Skype video conversation. . The link for this article located at Bruce Schneier is no longer available. . SkypeMorph is an innovative method to enhance Tor network privacy by disguising traffic as regular Skype communication, effectively masking user identity. SkypeMorph, Traffic Shaping, Network Privacy, Tor Concealment. . LinuxSecurity.com Team
Apr 13, 2012
•
Privacy
74
security tooltraffic analysisopen source toolDelving into p0f as an Silent Utility for Analyzing Network Traffic
In the network security world, nmap is the king for fingerprinting systems and services over the network. It can help identify the operating system (OS), type, and version of a network service, and vulnerabilities that might be present. . The problem with nmap is that it generates a lot of "noise" when it performs those activities because it has to send out packets to the system in question to learn more about it. Nmap is an example of an active fingerprinting tool. There are less noisy alternatives to nmap that fall into the passive fingerprinting category. Instead of actively sending packets to a host and service, they passively analyze network traffic to identify unique characteristics for particular operating systems, client applications, and network services. Their strength is based on the breadth of their signature database, which is not always great. To date, the majority of free and open-source passive fingerprinting tools have focused on OS fingerprinting The link for this article located at Dark Reading is no longer available. . p0f offers an innovative approach to passive network fingerprinting by utilizing advanced techniques that improve system identification while minimizing irrelevant data.. Passive Network Fingerprinting, p0f Tool, Nmap Alternative, Open Source Security, Network Traffic Analysis. . Anthony Pell
Feb 07, 2012
•
Network Security
79
traffic analysispacket capturenetwork analysisTShark: Powerful Tool for Live and Archived Network Analysis
Tshark is actually part of the Wireshark package, and has some similar functionality. It does some cool stuff though so I thought it. TShark is a network protocol analyzer. It lets you capture packet data from a live network, or read packets from a previously saved capture file, either printing a decoded form of those packets to the standard output or writing the packets to a file. TShark The link for this article located at Darknet UK is no longer available. . Tcpdump serves as a utility that intercepts real-time packet information or examines earlier recorded sessions effectively.. Tshark Tool, Network Packet Capture, Traffic Analysis Tool. . LinuxSecurity.com Team
Aug 23, 2010
•
Security Projects
74
tcpdumppacket capturenetwork analysisCapture Network Packets Remotely Using Cisco Router and Tcpdump
Have you ever thought about your routers. I mean - *really* thought about them? They think all day long, processing all of the packets in and out of your company. PC's with almost any operating system can be configured with tcpdump or windump (with wireshark or whatever gui you'd care to hang in front of it) to do packet capture an analysis. But if the traffic you are trying to capture is halfway across the world (or maybe closer but still too far to drive), can you use your router to capture packets in a standard libpcap format? As you've probably guessed, the answer is YES, or else there The link for this article located at SANS is no longer available. . PC's with almost any operating system can be configured with tcpdump or windump (with wireshark or w. thought, about, routers, *really*, think. . Anthony Pell
Nov 20, 2009
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!