Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 17 articles for you...
74
security enhancementnetwork managementnetwork configurationNetplan 1.0 Release Overview: Enhanced Security and Configuration Benefits
Canonical , the company behind Ubuntu , has introduced Netplan 1.0 , a network configuration tool that simplifies networking configuration on Linux systems. Netplan acts as a control layer above network stacks like systemd-networkd and NetworkManager, allowing administrators to manage and configure them easily. . What's New in Netplan 1.0? What Are the Network Security Implications of This Release? The release of Netplan 1.0 brings new features, such as support for WPA2 and WPA3 security protocols, improved wireless functionality, and better support for various network interface types. It also includes maintenance enhancements, such as a new buildsystem and automatic memory leak detection. Netplan has been made the default network management tool in upcoming releases of Ubuntu and Debian. Netplan 1.0 is an important development for Linux admins, infosec professionals, and sysadmins, as it dramatically simplifies the network configuration process on Linux systems. Introducing a control layer like Netplan allows for a streamlined user experience across different flavors of Ubuntu, making it easier to manage and configure network stacks. This is particularly valuable for organizations that need to configure Linux systems at scale. Including support for WPA2 and WPA3 security protocols in Netplan 1.0 is a significant security enhancement. As security practitioners, Linux admins and infosec professionals must ensure that network configurations are secure. By supporting these latest security protocols, Netplan enables better protection for wireless networks, which is especially important considering the increasing prevalence of Wi-Fi attacks and vulnerabilities. Furthermore, the improvements in maintenance, such as the adoption of Meson for the buildsystem and the implementation of automatic memory leak detection, highlight Canonical's commitment to quality and reliability. These enhancements contribute to a more stable and robust network configuration tool, reducing the chances of downtime andnetwork vulnerabilities. Looking ahead, adopting Netplan as the default network management tool in Ubuntu and Debian releases has long-term implications. It signifies Canonical's confidence in the tool's capabilities and potential impact on the Linux community. Sysadmins and Linux security practitioners need to consider the consequences of this shift, including the need for training and familiarization with Netplan's features and functionalities. As with any new technology, questions arise. How well does Netplan integrate with existing network management tools and configurations? Are there any compatibility issues when migrating from previous network management tools to Netplan? How will the community respond to Netplan's introduction as the default tool? These important questions must be addressed and explored in further discussions and testing within the Linux community. Our Final Thoughts on the Netplan 1.0 Release Netplan 1.0 significantly improves network configuration on Linux systems, simplifying the process for Linux admins, infosec professionals, and sysadmins. Including WPA2 and WPA3 support enhances network security, while the improvements in maintenance contribute to a more reliable tool. However, the transition to Netplan as the default network management tool raises questions and requires careful consideration by the Linux community. Moving forward, it will be essential for security practitioners to stay updated with Netplan's developments , understand its implications, and assess its suitability for their network configurations. . Explore Netplan 1.0's modern YAML template system for Linux network configuration, promoting clarity, security, and streamlined management of network setups. Netplan, Ubuntu Network Tool, Network Configuration, WPA3 Support, Linux Security. . Brittany Day
Apr 09, 2024
•
Network Security
215
security managementnetwork configurationlinux administrationIntroducing Canonical's Desktop Security Center for Ubuntu Users
Canonical is introducing a new Desktop Security Center , aiming to enhance accessibility to underlying security features for users of Ubuntu and other Linux distros. Although still a work in progress, this Flutter-based tool has generated considerable interest. . This article delves into the details of this center, discussing its notable features and potential benefits. Furthermore, it explores the implications of this development and raises questions about its long-term consequences. What Features Does Ubuntu's Desktop Security Center Offer Linux Admins? Canonical's Desktop Security Center addresses the need for a dedicated hub to streamline the accessibility of Ubuntu's security features. By consolidating scattered elements across various tools, the Desktop Security Center aims to provide a comprehensive platform for managing and controlling key security aspects. This initiative is particularly valuable for Linux administrators, infosec professionals, and sysadmins who deal with the intricate security requirements of their systems. The integration of Ubuntu Pro into the Desktop Security Center must not be overlooked. Enabling users to attach their machines to a Ubuntu Pro plan allows for features like ESM coverage, kernel liv e-patching, compliance, and hardening options. This integration implies that Canonical envisions the Desktop Security Center as a fundamental component of its premium offering, catering to enterprise-level security needs. Another notable feature is the ability to manage file access requests from confined apps. This functionality provides enhanced control over app permissions, making it easier for users to handle security aspects related to application access. Additionally, including a Network section allows users to enable or disable the firewall, configure ports, and utilize "stealth mode," which emphasizes Canonical's commitment to empowering users in securing their systems. From a long-term perspective, this release raises thought-provoking questions about thepotential robustness of the Desktop Security Center. As Ubuntu plans to ship it with the LTS release, Ubuntu 24.04, it positions the center as a critical dashboard for Ubuntu Pro users. However, further development and improvement is needed at the moment. The fact that the GitHub project page currently lacks documentation adds to the uncertainty regarding the maturity and stability of the tool. Implications & Consequences The introduction of the Desktop Security Center has several implications for security practitioners. Firstly, it simplifies the management of Ubuntu's security features, making it more accessible to users without extensive technical expertise. This can potentially bridge the gap between security requirements and user capabilities, improving protection against threats. However, admins must question if the current state of the tool is sufficient for its intended release. The absence of a functional snap permissions section and incomplete documentation on the project page raises concerns about stability and user experience. Delivering a robust and feature-complete Desktop Security Center is crucial to ensure the trust and adoption of the tool by security-conscious users and enterprises. Our Final Thoughts on Canonical's Desktop Security Center In conclusion, Canonical's new Desktop Security Center holds promise as a central hub for managing and controlling security aspects. By consolidating diverse features into a unified interface, it aims to enhance the security practices of Linux admins, infosec professionals, and sysadmins. However, concerns about the tool's completeness and maturity must be addressed to ensure its effectiveness and long-term viability. As security practitioners, it is essential to closely monitor the development and improvements of the Desktop Security Center to assess its potential impact on securing Ubuntu-based systems. Be sure to subscribe to our weekly newsletters for updates on timely, impactful Linux security-related topics like this. Stay safe outthere, fellow Linux enthusiasts! . Dive into Canonical's Desktop Protection Hub, a central platform for Ubuntu safeguarding tools tailored for Linux administrators and information security experts.. Desktop Security Center, Linux Administration, Ubuntu Pro, Security Management, Sysadmin Tools. . Brittany Day
Feb 14, 2024
•
Desktop Security
77
network configurationsecurity resourcetest lab guideDiscover the Unix Test Lab Guide Project for Effective Networking Setup
Thanks to my buddy Duane Dunston, MS, Assistant Professor of Information Security, Champlain College for sending this in. Duane tells me this is just the start - they'll have much more, including a security guide in the future. The Unix Test Lab Guide (UTLG) Project is designed to explain how to configure services and software in context to a real network. There are many website tutorials and forums where you can find solutions to various technical problems. There are guides that explain how to setup a service such as DHCP or DNS. However, it often requires reviewing multiple websites to understand how those all work together. . This project is inspired by the The Linux Documentation Project and the Microsoft Test Lab Guides . Specifically, the Microsoft TLG site has a wealth of information on configuring various Microsoft services. What is unique is that all guides start with a base configuration - the Base Test Lab Guide. That is the starting network that should be referenced when learning how to incorporate a service. That helps to provide reference and context to how it integrates into an existing infrastructure. This is similar to what we are wanting to achieve with the UTLGs. . Delve into the Unix Evaluation Workshop Initiative, motivated by Linux and Microsoft tools, to elevate your networking expertise.. Unix Test Lab, network configuration, Linux Documentation, security guide, service integration. . LinuxSecurity.com Team
Apr 28, 2020
•
Server Security
83
cyber threatssecurity risksnetwork configurationAddressing IPv6 Security Risks in Today’s Enterprise Networks
If your IPv6 strategy is to delay implementation as long as you can, you still must address IPv6 security concerns right now. If you plan to deploy IPv6 in a dual-stack configuration with IPv4, you're still not off the hook when it comes to security. And if you think you can simply turn off IPv6, that's not going to fly either. . The biggest looming security threat lies in the fact that enterprise networks already have tons of IPv6 enabled devices, including every device running Windows Vista or Windows 7, Mac OS/X, all Linux devices and BSD. The link for this article located at Network World is no longer available. . As organizations adopt IPv6, they face evolving security challenges due to its complexity and unique vulnerabilities. Enterprises must strengthen their defenses to mitigate risks.. IPv6 Security, Enterprise Networks, Network Configuration, Cybersecurity Threats, Dual-Stack Implementation. . LinuxSecurity.com Team
Nov 28, 2011
•
Hacks/Cracks
77
sambaauthenticationnetwork configurationExploring Samba Security Modes and Authentication Techniques
If you have read any of the Samba content here on Ghacks you probably will have noticed that within the smb.conf configuration file a line that begins with security =. This is a very important part of Samba setup and generally the section that gives users the most problems. Although the security mode would seem fairly straight-forward, it is certainly worth explaining.. In this article I will discuss what the security mode feature does and what the different modes are. By the end of this article there should be no confusion as to which mode your Samba setup should use. What are security modes? I like to think of security modes as a means to inform the server just how a client will authenticate. You know about authentication from many sources. You can authenticate at a local level, as part of a domain, using Active Directory, and more. How you authenticate is generally dictated by your IT department (or by yourself if you are personal or home user). Because of the different types of authentication, Samba needs a way to know how this authentication is going to happen. The link for this article located at gHacks is no longer available. . Explore Samba security configurations and learn to set up your authentication procedures skillfully in this comprehensive guide.. Samba Security, Authentication Modes, Network Configuration, File Sharing, Samba Setup. . LinuxSecurity.com Team
Mar 18, 2010
•
Server Security
74
DDoSDNS issuesnetwork configurationDDoS Risks Arising From Open Resolvers in Home Modem Devices
Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet's DNS (domain name system), making it easier for hackers to launch distributed denial-of-service (DDoS) attacks against their victims. . According to research set to be released in the next few days, part of the problem is blamed on the growing number of consumer devices on the Internet that are configured to accept DNS queries from anywhere, what networking experts call an "open recursive" or "open resolver" system. As more consumers demand broadband Internet, service providers are rolling out modems configured this way to their customers said Cricket Liu, vice president of architecture with Infoblox, the DNS appliance company that sponsored the research. "The two leading culprits we found were Telefonica and France Telecom," he said. In fact, the percentage of DNS systems on the Internet that are configured this way has jumped from around 50 percent in 2007, to nearly 80 percent this year, according to Liu. The link for this article located at Network World is no longer available. . Incorrect configurations of routers and fiber modems worsen IP resolution issues, creating a landscape susceptible to Distributed Denial of Service attacks. Analysts warn of rising threats. DDoS Risks, DNS Issues, Modem Security Risks. . Alex
Nov 16, 2009
•
Network Security
72
network configurationfirewall managementsecurity applicationConfigure Your Firewall Effectively with the Fwbuilder Application Tool
Firewall Builder (fwbuilder) is a graphical application that can help you to configure IP traffic filtering. It can compile the filtering policy you define into many specifications, including iptables and various languages used by Cisco and Linksys routers. Separating the actual policy you define and the implementation in this way should let you change what hardware is running your firewall without having to redefine your policy for that platform. How do you setup your firewall? Do you use an application to help or do you us just write your own Iptables? This article looks at a firewall application called fwbuilder and shows you some of the features of this software.. The link for this article located at Linux is no longer available. . Discover the essentials of configuring your firewall with Firewall Builder to enhance traffic control and ensure network security.. Firewall Management, Fwbuilder Guide, Network Configuration. . Bill Locke
Aug 14, 2008
•
Firewalls
74
networkingsecurity featurenetwork configurationComprehensive Guide on MAC Address Changes and ARP Functionality
First let me explain a few things about MAC addresses. MAC stands for Media Access Control and in a sense the MAC address is a computer. IPs are translated to MAC address by a protocol called ARP (Address Resolution Protocol). Let The link for this article located at Iron Geek is no longer available. . Explore MAC addresses, their functions, and ARP's vital role in networking across multiple operating systems.. MAC Address Change, ARP Protocol, Linux Networking, Network Configuration, Security Feature. . Brittany Day
Jan 07, 2007
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!