Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 5 articles for you...
77
traffic managementsecurity strategynetwork solutionsBT's Approach to Cost-Effective Solutions for DDoS Mitigation Challenges
SPs could provide the answer to combatting DDoS attacks according to BT, providing customers with DDoS mitigation at a price far cheaper than buying it in directly. According to Mick Creane, Head of Managed Security Strategy at BT, ISPs are in a unique position to be able to make DDoS mitigation affordable for its customers, and it's something BT is already considering. 'We're looking at technology in the core of our network that would direct traffic through a "scrubbing centre". This terminates requests, checks if they are valid and if they are not, drops them. Where they are valid, they are forwarded to the original destination,' said Creane. 'It's expensive, but with BT you have economies of scale. So we would divert traffic as necessary [rather than route everything through the "scrubbing centre"].' . The link for this article located at PCPro.co.uk is no longer available. . XYZ Corp aims to enhance cybersecurity measures by introducing cost-effective strategies to combat phishing attacks for its clients via advanced digital tools.. DDoS Mitigation, Network Security, Traffic Management, Managed Security, Innovative Solutions. . LinuxSecurity.com Team
Nov 28, 2006
•
Server Security
83
security breachcyber incidentddos attackNetwork Solutions DDoS Incident: DNS Server Outage Details
In the second attack of its kind in the past few days, Domain Name System (DNS) servers at Network Solutions Inc. were hit by a denial-of-service attack this afternoon, resulting in a brief performance degradation for customers, according to the company. The attacks, which started at around 2:20 p.m. EST, were targeted at the company’s WorldNIC name servers and resulted in a service degradation for about 25 minutes before the server was restored to normal, a spokeswoman for the company said. . A Network Solutions spokeswoman declined to say what measures the Herndon, Va.-based company took to mitigate the attack. Over the weekend, Joker.com, a domain-name registrar in Germany, was hit with a similar distributed denial-of-service (DDoS) attack that disrupted service to customers. In an advisory posted on its site, Joker said that “massive The link for this article located at ComputerWorld is no longer available. . A Network Solutions spokeswoman declined to say what measures the Herndon, Va.-based company took to. second, attack, domain, system, (dns), servers, network. . LinuxSecurity.com Team
Mar 29, 2006
•
Hacks/Cracks
74
key managementauthenticationnetwork solutionsExploring DNSSEC Key Management and Its Security Challenges
DNSSEC, which stands for DNS Security Extensions, is a method by which DNS servers can verify that DNS data is coming from the correct place, and that the response is unadulterated. In this article we will discuss what DNSSEC can and cannot do, and then show a simple ISC Bind 9.3.x configuration example. . DNSSEC is a public/private key system. This means that the owner of a DNS zone has a private key and a public key. Using the private key to digitally sign a zone will allow anyone with the zone's public key to verify that the data is authentic. As with all public key crypto systems, the method by which the entire world obtains your public key is a problem. If an attacker can intercept the transmission of your public key, the entire zone is compromised, so sending keys via email or other Internet vehicles probably isn't a good idea. The proposed solution to the basic key management problem is to have Network Solutions sign everyone's public key. For example; myname.com will create a key, sign it, and then send it to Network Solutions for signing. DNS servers around the world who have Network Solutions' key are now able to reject DNS records about myname.com that aren't accompanied by the appropriate signatures. This is the proposed method for global DNSSEC. It hasn't happened. There is no Network Solutions key that everyone knows, and Network Solutions has no mechanism to gather *.com keys. The highest level domain, '.' (dot), also needs to be under some administrative control. IANA or ICANN can hold this key, and sign all TLD's (.com, .org, etc), but the political mess this would create puts the implementation a long ways off. Whether the U.S. holds the key to the entire Internet or not, someone must before DNSSEC can work globally. Until this is in place, DNSSEC cannot protect anything outside your administrative control or access; meaning you have to manually distribute keys. The link for this article located at Enterprise Networking Planet is no longer available. . DNSSEC is apublic/private key system. This means that the owner of a DNS zone has a private key and. which, dnssec, stands, security, extensions, method, servers, verify. . Brittany Day
Apr 07, 2005
•
Network Security
78
network solutionssecurity integrationpublic networkJuniper Networks' Future Plans for Infranet Security and Growth Strategy
Fresh off record third-quarter growth, Juniper Networks on Wednesday outlined its strategy for the next 12 months, including plans to move to integrated security and to secure the Infranet, a profitable public IP network. . . .. Fresh off record third-quarter growth, Juniper Networks on Wednesday outlined its strategy for the next 12 months, including plans to move to integrated security and to secure the Infranet, a profitable public IP network. At Juniper's annual analyst meeting, CEO Scott Kriens and other company executives discussed the road ahead for the Sunnyvale, Calif.-based vendor, stating flatly that channel partners would play a key role. "We only successfully see the way to grow this business by connecting to partners," Kriens said. The link for this article located at Matt Villano is no longer available. . After impressive development in the third quarter, Juniper Networks outlined its plan to enhance comprehensive security for the Infranet.. Infranet Security, Juniper Strategy, Integrated Security, Network Solutions, Public Network Growth. . LinuxSecurity.com Team
Nov 10, 2004
•
Vendors/Products
74
network solutionswireless networkingurban technologyWiMax: A Cost-Effective Networking Solution for Urban Businesses
Take that wireless hot spot in the local java joint, jack it up on steroids and use it to connect an entire city full of computers. That, in short, is WiMax, a cutting-edge wireless technology that's starting to prove its worth as a fast, cheap and easy networking option for businesses. . . .. Take that wireless hot spot in the local java joint, jack it up on steroids and use it to connect an entire city full of computers. That, in short, is WiMax, a cutting-edge wireless technology that's starting to prove its worth as a fast, cheap and easy networking option for businesses. Media consulting firm VMS has already used an early version of the technology to save money and improve efficiency. It started when VMS acquired a new company across town from its Manhattan headquarters, and CIO Gerry Louw had to find a way to connect the two offices with a secure network link. The link for this article located at David M. Ewalt is no longer available. . Take that wireless hot spot in the local java joint, jack it up on steroids and use it to connect an. wireless, local, joint, steroids, connect. . Anthony Pell
Sep 13, 2004
•
Network Security
74
network protectionnetwork solutionswi-fi securityInvestigating Wi-Fi Security Trends at the 802.11 Conference in Boston
At the recent Boston 802.11 Planet Conference and Expo, the aisles and booths were bustling with activity, giving ample proof that Wi-Fi (Wireless Fidelity, or more properly, wireless networking) has finally come of age. The hardware gear venders - switch, carriers, . . . . At the recent Boston 802.11 Planet Conference and Expo, the aisles and booths were bustling with activity, giving ample proof that Wi-Fi (Wireless Fidelity, or more properly, wireless networking) has finally come of age. The hardware gear venders - switch, carriers, integrators, chip manufacturers, and antenna - were all there in force, of course. However, the big news was that the show was dominated by vendors addressing network security, with new solutions from the network, software, and hardware perspectives. Security has long been the Achilles heel of the wireless industry. Set aside the security issues, though, and the case for wireless networking is overwhelmingly compelling -- it's cheap, easy, and portable. Now that the industry is addressing the problem head-on with new solutions for manageable and acceptable network security, Wi-Fi may well be a choice that enterprises should be considering (or reconsidering). According to an article in the April 26 issue of Barrons, a one-hour cruise in lower Manhattan last March revealed 622 Wi-Fi networks, with two-thirds of them wide open to unauthorized use. And don't think just because you are located in a suburban office park you can escape -- this problem is not limited to dense urban areas. Wi-Fi networks in multi-tenant office parks and employees' residences can easily spill over into adjacent areas inside the same building, or into or across public thoroughfares. The link for this article located at CrossNodes is no longer available. . Delve into the innovative Wi-Fi security measures presented at the Boston 802.11 Planet Symposium aimed at enhancing network protection.. Wireless Networking, Wi-Fi Security, Network Solutions. . Anthony Pell
Jul 15, 2003
•
Network Security
78
IT managementnetwork solutionssecurity productStreamlining IT Security Management With Integrated Solutions
As IT staffs continue to look for ways to stretch their security budgets, vendors are readying new products that combine multiple security functions in a single offering. Nokia Corp. and Broadcom Corp. next week will introduce products that take discrete . . . . As IT staffs continue to look for ways to stretch their security budgets, vendors are readying new products that combine multiple security functions in a single offering. Nokia Corp. and Broadcom Corp. next week will introduce products that take discrete capabilities normally found in several different devices or applications and weave them together. Although the companies take different approaches, the goal is the same: to reduce the number of security devices IT staffs have to manage. Nokia's Internet Communications division this week plans to introduce its Secure Access System, a line of appliances based on the Espoo, Finland, company's software security platform and IPSO hardened operating system. The boxes are designed to provide security functionality that allows remote and mobile users to access corporate networks. The heart of the system is an SSL (Secure Sockets Layer)-based VPN (virtual private network) that provides a connection to all of a user's corporate applications, including e-mail, client/server software and enterprise applications. The link for this article located at eWeek is no longer available. . Suppliers are launching solutions aimed at aiding IT departments in overseeing various security operations effectively.. Security Technology, IT Security Solutions, Network Solutions, Mobile Access Security. . LinuxSecurity.com Team
Jun 17, 2003
•
Vendors/Products
81
identity managementpassword managementnetwork solutionsStreamline Your Online Transactions With Identity Management Solutions
If you're tired of trying to remember a hundred user IDs and passwords to do business on-line, network identity management might be the answer. You log on once, and the information is passed from site to site. Identify yourself to . . . . If you're tired of trying to remember a hundred user IDs and passwords to do business on-line, network identity management might be the answer. You log on once, and the information is passed from site to site. Identify yourself to an airline's Web site to book a flight, then go elsewhere to reserve a hotel room without re-entering personal information. It's a real time-saver -- if you're comfortable about how information is shared among on-line merchants. There are two significant identity management plans today. Microsoft Corp. operates Passport, a centrally managed system that identifies visitors to the company's on-line properties as well as the eBay auction site, coffee chain Starbucks and more than 100 other Web sites. The other option is the Liberty Alliance, a consortium of technology vendors, financial services companies, merchants and others. Michael Barrett, president of Liberty Alliance's management board, says his group is not competing with Microsoft. The link for this article located at Globe is no longer available. . Effective management of digital identities optimizes efficiency by simplifying online commerce operations, eliminating the need for numerous authentication steps.. Identity Management, Single Sign-On, Password Security, Network Solutions. . LinuxSecurity.com Team
Mar 27, 2003
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!