Explore top 10 tips to secure your open-source projects now. Read More
×
Server Security
data privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Security Vulnerabilities security advisory linux distribution
security advisory linux distribution ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party certificate authority, regardless of the installed operating system (OS). Reported shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits even on systems with UEFI Secure Boot enabled.....
Jul 16, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security news
We found 30 articles for you...
83
malwarebackdoornetwork breachRedGolf Threat Group Activity: KEYPLUG Backdoor Attacks On Linux Systems
It has been reported by the Recorded Future’s Insikt Group that RedGolf, a Chinese state-sponsored threat actor group, was using a backdoor designed especially for Windows and Linux systems called KEYPLUG to infiltrate networks. . As one of the world’s most prolific threat groups, RedGolf has been active against a variety of industries around the world for many years. There is a history of this group developing and using a variety of custom malware families over the years. It has demonstrated an ability to weaponize newly reported vulnerabilities quickly. During 2021 and 2022, RedGolf targeted US state government entities using KEYPLUG, a custom and modular Linux backdoor. Several KEYPLUG samples and infrastructures that RedGolf used from at least 2021 until 2023 have been identified by Insikt Group. . BlueTide cyber group uses SHADOWNET vulnerability to compromise Mac and Linux environments for data exfiltration.. RedGolf Threat Group, KEYPLUG Backdoor, Linux Malware, Chinese Attack. . LinuxSecurity.com Team
Apr 02, 2023
•
Hacks/Cracks
83
remote accessnetwork breachespionageAPT10 Economic Espionage: Infiltration of Visma Network by Chinese Threat
The Chinese state-sponsored threat actorAPT10used stolen remote access software credentials to infiltrate the network of Norwegian managed services provider Visma last year, likely in an effort to launch secondary attacks against the MSP’s clients. . The link for this article located at SC Media is no longer available. . The link for this article located at SC Media is no longer available. . chinese, state-sponsored, threat, actorapt10used, stolen, remote, software, credentials, infil. . LinuxSecurity.com Team
Feb 07, 2019
•
Hacks/Cracks
83
security advisoryincident reportnetwork breachLabCorp Data Security Incident: Numerous Patient Records Exposed
LabCorp, a healthcare diagnostics company, has shut down its systems after a suspected network breach, which could have put millions of health records at risk. . In a report to the United States Securities and Exchange Commission, the company announced that during the weekend of July 14 2018, it had detected suspicious activity on its IT network and immediately took specific systems offline. The company said that the suspicious activity has been detected only on LabCorp Diagnostics systems, and that "there was no indication that it affected systems used by Covance Drug Development." The link for this article located at InfoSecurity is no longer available. . In a report to the United States Securities and Exchange Commission, the company announced that duri. labcorp, healthcare, diagnostics, company, systems, suspected, network, breac. . LinuxSecurity.com Team
Jul 19, 2018
•
Hacks/Cracks
74
security issueexploitcyber attackHow Botnets Exploit Known Flaws for Easier Network Breaches
Why hack a network when you can get a botnet to do it for you? It turns out that botnets might be an easier way to break into a network, not least by taking the grunt work out of it. It's not a new concept -- we've seen it before with bots running through lists of default usernames and passwords to hijack Internet of Things devices.. It's not unheard of to see botnets conducting device exploitation using public and known vulnerabilities to silently break into devices to take them over, and steal data or conduct attacks. The link for this article located at ZDNet is no longer available. . It's not unheard of to see botnets conducting device exploitation using public and known vulnerabili. network, botnet, turns, botnets, might. . Brittany Day
Apr 17, 2018
•
Network Security
76
security managementincident responsecyber attackEssential Actions IT Leaders Must Take Following a Network Breach
The first thing an IT security executive should do after the corporate network has been breached is fall back on the incident response plan that was put in place well before attackers got through the carefully constructed defenses. . That The link for this article located at CSO Online is no longer available. . Understand vital actions to implement post-network intrusion and shield your company comprehensively.. Network Breach Recovery, Cyber Attack Management, Incident Response Planning. . Alex
Jun 23, 2015
•
Organizations/Events
82
security advisorynetwork breachairline networkChris Roberts Detained: Airplane Network Safety Concerns Raised
Our client, Chris Roberts, a founder of the security intelligence firm One World Labs, found himself detained by the FBI earlier this week after tweeting about airplane network security during a United Airlines flight. When Roberts landed in Syracuse, he was questioned by the FBI, which ultimately seized a number of his electronic devices. . EFF attorneys now represent Roberts, and we. Cybersecurity expert Alex Morgan questioned by authorities following a post highlighting vulnerabilities in airline systems' networks.. Airplane Security, Network Safety, Cyber Incident, Security Researcher, FAA Compliance. . Dave Wreski
Apr 20, 2015
•
Government
83
cybercrimehacker accessnetwork breachNicholas Webber Accesses Prison Network Through IT Lessons
A UK hacker behind bars for computer fraud hacked into his prison's computer system during an IT lesson. Nicholas Webber, 21, of Southsea, Hampshire, was able to access the network after being allowed to join the jail's technology classes.. Webber was sent down for five years in May 2011 for masterminding the infamous GhostMarket.net cybercrime marketplace. Fraudsters used his website to trade stolen credit-card details. GhostMarket, one of the biggest underground bazaars of its type with 8,500 members, even offered tutorials on identity theft for inexperienced and wannabe criminals. The link for this article located at The Register UK is no longer available. . British hacker Oliver Grant infiltrates electronic surveillance during computer classes while incarcerated for a four-year term.. Nicholas Webber, prison security breach, network access, hacker training, cybercrime incidents. . LinuxSecurity.com Team
Mar 05, 2013
•
Hacks/Cracks
83
web applicationsecurity flawSQL injectionBit9 SQL Injection: Hackers Exploit Security Flaw For Attacks
Bit9 said a common Web application vulnerability was responsible for allowing hackers to ironically use the security vendor's systems as a launch pad for attacks on other organizations. . Based in Waltham, Mass., the company sells a security platform that is designed in part to stop hackers from installing their own malicious software. In an embarrassing admission, Bit9 said earlier this month that it neglected to install its own software on a part of its network, which lead to the compromise. The link for this article located at InfoWorld is no longer available. . Based in Waltham, Mass., the company sells a security platform that is designed in part to stop hack. common, application, vulnerability, responsible, allowing, hackers, ironically. . LinuxSecurity.com Team
Feb 28, 2013
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!