Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Organizations should combine the NVD and CISA KEV catalog to prioritize vulnerabilities effectively, focusing on managing real risks rather than being overwhelmed by theoretical scores and alert fatigue.. To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the NVD provides baseline technical metrics aligned with the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 65 articles for you...
210
security advisorysecurity issueremote code executionCUPS: 2024-47176 critical: Remote Code Execution Risk Advisory
CUPS, or the Common Unix Printing System , is an open-source printing system widely utilized on Unix-like operating systems such as Linux, BSDs, and macOS. CUPS acts as an open-source print server, allowing a computer to become an effective print server while managing print jobs and queues and providing a standardized interface for printing services. . It was recently discovered that CUPS contains a critical vulnerability that allows remote attackers to gain entry and take control of devices remotely. Furthermore, this issue could allow unauthenticated remote code execution, meaning an attacker could gain control without prior authentication of affected systems. Let's take a closer look at this critical flaw that could lead to data theft and hijacking of affected systems. I'll then share measures you should be taking to ensure your systems and your sensitive information are secure. Understanding This Critical CUPS Flaw Simone Margaritelli disclosed this vulnerability, which was identified as affecting most Linux distributions, some BSD variants, Google ChromeOS, Oracle's Solaris, and potentially other systems where CUPS is used. The main issue is related to the cups-browsed service. The vulnerability, tracked as CVE-2024-47076 (libcupsfilters), CVE-2024-47175 (libppd), CVE-2024-47176 (cups-browsed) and CVE-2024-47177 (cups-filters), allows a remote, unauthenticated attacker to exploit CUPS via network access in the following way: Access Point: The main entry point is UDP port 631, which CUPS uses for incoming print jobs and administrative tasks. Spoofing Mechanism: If direct access to port 631 is unavailable, attackers might use spoofing techniques involving zeroconf, mDNS, or DNS-SD advertisements. Command Execution: By exploiting this vulnerability, an attacker can silently replace existing printers' IPP URLs with malicious ones or install new printers. When a print job is queued, the malicious URL triggers arbitrary command execution, granting the attackercontrol over the system. This can be particularly dangerous when printing services are exposed to the local network or the internet. What Is the Impact of This Vulnerability? This vulnerability has an estimated CVSS severity score of 9.9 out of 10, which indicates high impact and low complexity to exploit. Its scope of impact is wide-reaching, potentially impacting hundreds of thousands of devices exposed to the internet, including most Linux distributions, certain BSDs, ChromeOS Solaris systems, and systems using CUPS printers. If successful exploitation occurs, consequences could include anything from unauthorized access and data theft through system takeover to disrupting essential infrastructure services reliant on Linux systems. Protection Measures for Users & Admins Does this critical flaw impact your systems? If so, don't stress! To mitigate this security risk, users and administrators should immediately implement the mitigation strategies discussed below. Disable and Remove cups-browsed: Disable the cups-browsed service if it's not needed. Remove the cups-browsed package if it's not required. sudo systemctl stop cups-browsed sudo systemctl disable cups-browsed sudo apt-get remove --purge cups-browsed Update CUPS Installation: Regularly check for updates to CUPS and apply security patches released by your distro(s). sudo apt-get update sudo apt-get upgrade cups Network Configuration: Block access to UDP port 631 using firewall rules to prevent exposure to the network/internet. Consider blocking DNS-SD traffic if it's not needed. sudo ufw deny 631/udp Monitor for Further Guidance: Follow security bulletins and advisories from your OS maintainers and CUPS developers to stay updated with new information about this vulnerability and additional protective measures. Assess Your Risk: Evaluate how exposed your systems are to this vulnerability. Systems that are firewalling CUPS or do not havecups-browsed installed are likely secure from this issue. Our Final Thoughts on This Severe CUPS Flaw These recently disclosed vulnerabilities in CUPS pose a severe security threat to devices running Unix-like operating systems. Admins must take swift action to mitigate this threat by disabling unnecessary services, updating software, and restricting network access. These steps will help protect your systems against remote hijacking attacks, data theft, and other damaging attacks. . Severe CUPS flaw enables remote code execution, posing threats of data breach and system takeover on Linux platforms.. CUPSVulnerability,RemoteExploit,SystemHijacking,CUPSUpdate. . Brittany Day
Oct 01, 2024
•
Security Vulnerabilities
210
exploitmalwareransomwareLockBit Ransomware Exploits Severe Citrix Bleed Flaw to Encrypt Data
LockBit ransomware is exploiting a critical Citrix bleed vulnerability to break into enterprise networks. The malware spreads via infected USB sticks and allows hackers to steal data and install more malware. . LockBit is being distributed as a self-extracting archive (SFX) file that contains an executable named "Citrix_1.exe," which runs the malicious code on a machine without requiring any user interaction. The file can be distributed over email or any other means of file transfer. After infection, LockBit starts encrypting files on a victim's computer by using AES encryption with a hardcoded key. The malware then displays a ransom note in a text document: "Your files are encrypted! Your personal ID: 1234567890." The malware also installs itself as a service for persistence, which allows it to start automatically when the system boots up. To prevent users from accessing other applications on their systems, LockBit also installs an application lock that prevents users from closing or minimizing windows open in the background while they're trying to work with their files. The link for this article located at The Hacker News is no longer available. . Maze ransomware leverages severe Microsoft Exchange flaw to penetrate systems and lock up data.. LockBit Ransomware, Citrix Bleed Exploit, Cybersecurity Threats. . Brittany Day
Nov 25, 2023
•
Security Vulnerabilities
210
security advisorydenial of servicenetwork securityLinux Kernel Security Advisory: High Severity DoS Flaws Resolved
Five high severity Linux network security vulnerabiities have been found and fixed. Patch your systems immediately to protect your servers against DoS attacks! . Young and rising Linux security developer Alexander Popov of Russia's Positive Technologies discovered and fixed a set of five security holes in the Linux kernel's virtual socket implementation. An attacker could use these vulnerabilities ( CVE-2021-26708 ) to gain root access and knock out servers in a Denial of Service (DoS) attack. With a Common Vulnerability Scoring System (CVSS) v3 base score of 7.0, high severity, smart Linux administrators will patch their systems as soon as possible. . Critical vulnerabilities in Linux network protocols have been identified and resolved. Prompt application of updates is recommended to protect your systems.. Linux Network Threats, Kernel Security, High Severity Patches. . Brittany Day
Mar 04, 2021
•
Security Vulnerabilities
210
security risknetwork threathome networkIdentifying Serious Security Vulnerabilities Present in Home Routers
Did you know that your router could be the biggest security hole in your network? . Many of the most popular home routers available to buy today feature a worrying number of security flaws and vulnerabilities, new research has found. A report from Fraunhofer Institute for Communication ( FKIE ) discovered that the firmware present in a large number of leading routers was susceptible to hugely damaging security issues. Many routers were found to never have received a single security firmware update in their lifetime, despite the risk that this could pose to users at home and at work, and were vulnerable to hundreds of well-known security issues. . Numerous widely-used residential routers contain significant vulnerabilities, putting both home and workplace users at risk.. Router Security, Home Network Risks, Firmware Vulnerabilities. . Brittany Day
Jul 08, 2020
•
Security Vulnerabilities
67
security advisorynetwork threattelecom securityU.S. Officials Warn Huawei Can Covertly Access Telecom Networks
Huawei can covertly access mobile networks through back doors meant for law enforcement, the U.S. has told allies in a bid to show that the firm poses a security threat. . U.S. officials say Huawei Technologies Co. can covertly access mobile-phone networks around the world through “back doors” designed for use by law enforcement, as Washington tries to persuade allies to exclude the Chinese company from their networks. The link for this article located at The Wall Street Journal is no longer available. . U.S. officials warn Huawei can secretly access global mobile networks through back doors intended for law enforcement.. huawei, covertly, mobile, networks, through, doors, meant, enforcement. . LinuxSecurity.com Team
Feb 12, 2020
•
Cryptography
74
network threatwireless protocolslocation tracking4G and 5G Security Flaws Allow Location Tracking Threats
Over the past 18 months, revelations about wireless carriers selling smartphone location data to third parties have forced telecoms to promise reform. Worryingly, but perhaps not surprisingly, these user protections have been slow to actually materialize. Even if carriers shape up, though, an attacker can still track a smartphone's location and snoop on phone calls thanks to newly discovered flaws in 4G and even 5G protocols. . A group of researchers from Purdue University and the University of Iowa will present their findings Tuesday at the Network and Distributed System Security Symposium in San Diego. They note that their discoveries, first reported by TechCrunch , are particularly concerning since the 5G standard was specifically developed to better protect against these types of attacks. The link for this article located at Wired is no longer available. . A group of researchers from Purdue University and the University of Iowa will present their findings. months, revelations, about, wireless, carriers, selling, smartphone, location. . Brittany Day
Feb 27, 2019
•
Network Security
74
security advisorydata exposurenetwork threatTrain Wi-Fi Risk: Exposed Customer Data And Network Threats
Vulnerabilities on the Wi-Fi networks of a number of rail operators could expose customers' credit card information, according to infosec biz Pen Test Partners this week.. The research was conducted over several years, said Pen Test's Ken Munro. "In most cases they are pretty secure, although whether the Wi-Fi works or not is another matter," he added. The link for this article located at The Register is no longer available. . The research was conducted over several years, said Pen Test's Ken Munro. 'In most cases they are pr. vulnerabilities, wi-fi, networks, number, operators, expose, customers', credit. . Brittany Day
May 12, 2018
•
Network Security
74
malwaretrojanDDoS attackLinux Botnet With XOR Trojan Launching Daily DDoS Attacks
Threat actors are leveraging a botnet made up of infected Linux machines to launch powerful distributed denial-of-service (DDoS) attacks against as many as 20 targets per day, according to Akamai's Security Intelligence Response Team (SIRT). . The botnet is composed of Linux machines infected with a stealthy trojan identified in 2014 as "XOR DDoS." The threat was observed altering its installation depending on the victim's Linux environment and running a rootkit to avoid detection. . The botnet is composed of Linux machines infected with a stealthy trojan identified in 2014 as 'XOR . threat, actors, leveraging, botnet, infected, linux, machines, launch, powerful, distribu. . Alex
Mar 14, 2017
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!