Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 7 articles for you...
78
security advisoryUbuntunetwork trafficZorin OS 17.3 Transition: Built on Ubuntu with Enhanced Security Features
As support for Windows 10 winds down , system administrators and IT professionals face an inevitable transition. By October, millions of PCs will no longer receive security updates from Microsoft, leaving them vulnerable to cyber threats. With this in mind, finding a secure, reliable alternative that matches and potentially exceeds the security features that Windows users are accustomed to becomes imperative. . Zorin OS 17.3 offers a fitting answer to this challenge. Built on the foundation of Ubuntu, renowned for its stability and robust security infrastructure, Zorin OS presents itself as a viable and compelling option for those making the switch. Let’s dive into the security benefits and practicalities of adopting Zorin OS 17.3 for your systems. Enhanced Security Updates and Patches At the heart of any secure operating system are timely updates and patches that respond swiftly to emerging threats. Zorin OS 17.3 is built on Ubuntu, which is known for its proactive approach to security . This encompasses regular updates that address the latest vulnerabilities and strengthen the system against potential exploits. In practical terms, you can rest assured that the operating system is consistently monitored and improved to guard against new and evolving threats. The frequency and reliability of these updates are significant. Regular patches mean that the development community acts quickly to mitigate risks and roll out fixes as soon as a vulnerability is discovered. This continuous improvement cycle is a cornerstone of Linux-based systems. It highlights why Zorin OS 17.3 can offer a security edge over aging Windows systems that are soon out of support. Built-in Security Features Zorin OS 17.3 has several formidable in-built security features designed to provide a layered defense mechanism against various threats. One of the standout elements is the UFW (Uncomplicated Firewall) , a powerful tool that allows administrators to easily configure the firewall. Managing network traffic andblocking unauthorized access becomes a straightforward task for maintaining secure communications. Additionally, Zorin OS leverages AppArmor , a security module for the Linux kernel that restricts the capabilities of individual applications through a set of configurable policies. By limiting what applications can do, AppArmor provides an additional shield, ensuring that even if an application is compromised, its ability to harm the system is sharply curtailed. Another critical feature is data encryption. Zorin OS supports full-disk encryption, which means all data stored on the drive is encrypted and can only be accessed with the appropriate credentials. This is crucial for preventing data breaches, particularly if physical access to the computer is gained. Pairing this with file and folder encryption options, Zorin OS effectively protects your sensitive information. User-Friendly Security Management For administrators transitioning from the familiar Windows environment, Zorin OS 17.3 offers an intuitive and user-friendly approach to security management. The system is designed to be accessible, ensuring that even those less familiar with Linux can quickly get up to speed. Zorin OS comes with various pre-installed security tools essential for maintaining a robust security posture. For example, ClamAV , an antivirus solution, scans for and eliminates malware and viruses, ensuring your systems stay clean. GUFW, the graphical interface for controlling the firewall, allows admins to easily configure rules, enhancing network security without requiring deep technical knowledge. Curated Software Store Many operating systems present a significant security risk due to the applications and software that users install. Zorin OS addresses this by providing a curated software store with a selection of pre-vetted applications. This minimizes the risk of installing malicious software, a common vector for cyberattacks. The software store also ensures that all applications comply with the system’ssecurity standards, offering confidence that the tools and software are secure. This contrasts sharply with the often-unregulated application environments, where users can unknowingly install harmful software. Support and Community An often underappreciated aspect of Linux-based systems is the extensive community support. Like its Ubuntu foundation, Zorin OS benefits from a vibrant user and developer community. This collective effort contributes to continuous improvements and quick responses to security vulnerabilities. Additionally, Zorin OS provides professional support options that may benefit larger organizations needing guaranteed response times and specialized assistance. This blend of community and official support ensures that help is available, streamlining the transition process and ongoing system maintenance. Our Final Thoughts: Why Zorin OS 17.3? As we prepare for the end of Windows 10 support, system administrators must take proactive steps in securing their digital environments. Zorin OS 17.3 offers a fortified, reliable, and user-friendly alternative that addresses key security concerns head-on. With its foundation in Ubuntu, Zorin OS ensures systems receive timely updates and patches against threats. Its built-in security features, including the UFW firewall and AppArmor, provide layers of protection, while full-disk encryption secures data. The intuitive security management interface and pre-installed tools make it accessible for those transitioning from Windows, simplifying the management of security settings and updates. Furthermore, the curated software store minimizes the risk of malware, and the strong support community offers a safety net for novice and experienced admins. Adopting Zorin OS 17.3 isn’t just about finding an alternative to Windows; it’s about upgrading to a system designed with robust security at its core. This transition offers an opportunity to enhance your overall security posture and ensure that systems remain protected against evolving cyberthreats in the years to come. Switching to Zorin OS 17.3 can feel daunting, but its security and user-friendly features make it worthwhile. Embrace the transition, knowing that you’re stepping into a secure, modern, and efficient operating system. Those looking to give Zorin OS 17.3 a try can download an ISO here. We'd love to hear what you think! Reach out to us @lnxsec and let us know. . Zorin OS 17.3 elevates protection with prompt patches, integrated tools, and intuitive administration for a smooth migration.. Zorin OS 17.3, Ubuntu security, user-friendly management, Linux firewall, malware protection. . Brittany Day
Mar 31, 2025
•
Vendors/Products
72
network trafficsecurity best practicesubuntuManaging UFW Firewall on Ubuntu: Benefits, Limitations and Insights
Iptables are the cornerstone for configuring firewalls and managing network traffic in Linux. For the uninitiated, iptables can be complex and intimidating. However, most Linux distributions provide simpler front-end interfaces to manage iptables rules. Ubuntu's Uncomplicated Firewall (UFW) offers a straightforward way to configure firewall settings without diving into intricate iptables commands. . What Are the Benefits of Using UFW to Lock Down My Ubuntu Systems? UFW provides an abstraction layer on top of iptables to manage rules with simple commands like 'allow' and 'deny'. This simplifies firewall management for sysadmins, especially those new to Linux. While UFW eases iptables configuration, it is still built on top of iptables and does not replace it. Iptables remains the underlying engine that handles traffic filtering in Linux. Understanding iptables is valuable, but UFW offers an uncomplicated interface. According to The New Stack , "With UFW, you can easily add, remove and manage firewall rules. UFW aims for simplicity and tries to make IPTables easier for the end user." Does ufw achieve its aim of simplifying the locking down of Linux systems with a firewall? There's no doubt that ufw makes firewall management significantly easier for Ubuntu users. The default-deny stance, human-readable syntax, and easy enable/disable functions allow even novice Linux admins to set up a basic firewall with little effort. Experienced admins can still customize rules while benefiting from ufw's simplicity. What Are the Limitations of UFW? However, ufw does have some limitations. First, it lacks advanced firewall features like rate limiting or connection tracking that are present in iptables. UFW is essentially a frontend for iptables, so any limitations in iptables apply to ufw as well. Second, ufw rules apply on a per-server basis - there's no central management for multiple servers. This isn't feasible for larger deployments. Finally, ufw is Ubuntu/Debian specific. Knowledge isn't directlytransferable to other distros with different firewall tools. ufw can have profound security implications for Linux admins, infosec professionals, and sysadmins if not configured properly. As the article mentions, ufw aims to simplify firewall management for Ubuntu desktop and server users. However, misconfiguring ufw rules could lead to dangerous vulnerabilities. For instance, an over-permissive ufw policy that opens too many ports and services could expose the system. Attackers might exploit open ports running vulnerable software to gain initial access. Furthermore, complex ufw rulesets with too many customized rules could also introduce weaknesses if not thoroughly tested. The defaults offer a secure starting point, but tuning requires expertise. So, in summary, ufw nails the core aim of simplifying host-based firewalls for Ubuntu. But the tradeoff is lack of advanced controls and central management. Ufw won't replace iptables for complex, enterprise environments. But for single Ubuntu servers and small deployments, ufw's ease of use is hard to beat! Our Final Thoughts on UFW Uncomplicated Firewall provides a straightforward way for Ubuntu users to configure firewall policies and rules. For admins, infosec professionals and enthusiasts running Ubuntu desktop or server, UFW makes it simple to allow or deny network traffic based on services and ports. The key takeaways are that UFW provides ease of use while still enabling powerful firewall capabilities. Users can securely open only the ports they need with just a few commands, drastically reducing the attack surface. While UFW may not satisfy all advanced firewall needs, it lowers the barrier to properly configuring firewall policies for many common use cases. Overall, UFW brings uncomplicated yet effective host-based firewall capabilities to Ubuntu. For Linux users who want an easy way to tighten security and block unwanted network traffic, UFW is likely the simplest option available today. Its preset application profiles andhuman-readable syntax help users quickly configure and manage firewall policies with confidence. Are you using UFW to help secure your Linux systems? We'd love to hear your thoughts! Connect with us on X @lnxsec and let's discuss your experience as a UFW user. Stay safe out there, fellow Ubuntu users! . UFW provides an intuitive approach to overseeing firewall configurations on Ubuntu, perfect for beginners due to its straightforward commands and guidelines.. UFW Management, Ubuntu Firewall, Network Security, Iptables Simplification. . Brittany Day
Dec 31, 2023
•
Firewalls
74
network traffictraffic analysisdigital securityExplore OpenPacket.org 1.0: A New Resource for Network Traffic Research
Nearly three years after the initial post describing the idea , I am happy to report that OpenPacket.org 1.0 is ready for public use, free of charge. The mission of OpenPacket.org is to provide quality network traffic traces to researchers, analysts, and other members of the digital security community. One of the most difficult problems facing researchers, analysts, and others is understanding traffic carried by networks. At present there is no central repository of traces from which a student of network traffic could draw samples. OpenPacket.org will provide one possible solution to this problem. For all the Snort, Wireshark, and TcpDump enthusiasts out there, OpenPacket.org provides fresh packets for research and analyzing purposes. Looking for a particular traffic pattern? Check out OpenPacket.org!. The link for this article located at Tao Security is no longer available. . NetTraceHub 2.0 provides user-friendly access to network data for cybersecurity studies. Become a member now!. OpenPacket, Network Traffic Analysis, Digital Security Tools. . Brittany Day
Apr 07, 2008
•
Network Security
82
network trafficFBIprivacyFBI Surveillance Experts Replace Carnivore with New Commercial Tools
FBI surveillance experts have put their once-controversial Carnivore Internet surveillance tool out to pasture, preferring instead to use commercial products to eavesdrop on network traffic, according to documents released Friday. . Two reports to Congress obtained by the Washington-based Electronic Privacy Information Center under the Freedom of Information Act reveal that the FBI didn't use Carnivore, or its rebranded version "DCS-1000," at all during the 2002 and 2003 fiscal years. Instead, the bureau turned to unnamed commercially-available products to conduct Internet surveillance thirteen times in criminal investigations in that period. Carnivore became a hot topic among civil liberations, some network operators and many lawmakers in 2000, when an ISP's legal challenge brought the surveillance tool's existence to light. One controversy revolved around the FBI's legally-murky use of the device to obtain e-mail headers and other information without a wiretap warrant -- an issue Congress resolved by explicitly legalizing the practice in the 2001 USA PATRIOT Act. The link for this article located at Kevin Poulsen is no longer available. . NSA transitions from traditional methods to advanced commercial tools for online monitoring, sources indicate.. FBI Surveillance Tool, Digital Privacy Issues, Network Eavesdropping. . Joe Shakespeare
Jan 17, 2005
•
Government
74
security practicesnetwork trafficpacket sniffingExploring Packet Sniffing Techniques in Layer 2 Switched Networks
Packet sniffing is a technique of monitoring network traffic. It is effective on both switched and nonswitched networks. In a non-switched network environment packet sniffing is an easy thing to do. This is because network traffic is sent to a hub . . . . Packet sniffing is a technique of monitoring network traffic. It is effective on both switched and nonswitched networks. In a non-switched network environment packet sniffing is an easy thing to do. This is because network traffic is sent to a hub which broadcasts it to everyone. Switched networks are completely different in the way they operate. Switches work by sending traffic to the destination host only. This happens because switches have CAM tables. These tables store information like MAC addresses, switch ports, and VLAN information. Before sending traffic from one host to another on the same local area network, the host ARP cache is first checked. The ARP cache is a table that stores both Layer 2 (MAC) addresses and Layer 3 (IP) addresses of hosts on the local network. If the destination host isn't in the ARP cache, the source host sends a broadcast ARP request looking for the host. When the host replies, the traffic can be sent to it. The traffic goes from the source host to the switch, and then directly to the destination host. This description shows that traffic isn't broadcast out to every host, but only to the destination host, therefore it's harder to sniff traffic. The link for this article located at Help Net Security is no longer available. . Packet analysis is a method for observing data flow within a network. Its efficacy spans across both switched and non-switched systems.. Packet Sniffing, Network Traffic, Switched Networks, Monitoring Technique. . Anthony Pell
Dec 15, 2003
•
Network Security
74
network trafficbandwidth managementcorporate networksEffective Strategies for Corporate Network Bandwidth Management
You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to . . . . You can't manage what you can't see. So it's not surprising that with corporate networks congested more and more by P2P, streaming media, and other "leisure" traffic, network admins are increasingly turning to specialized network management software packages and appliances to give them the information they need to take back control of their bandwidth. Of course, if your network is uncongested, network logons are quick, and users find all their business applications are running at top speed, then you're probably not too concerned about a handful of people using KazaA somewhere in your organization. Sadly, though, this ideal state of affairs is rarely witnessed, except perhaps in administrators' dreams. The truth is that most corporate networks carry far more network-clogging leisure traffic than they can cope with. That's because leisure apps are often particularly aggressive bandwidth users. The link for this article located at CrossNodes is no longer available. . Optimize your data usage smartly through dedicated applications as business systems face saturation from recreational browsing.. Bandwidth Management Tools, Corporate Network Control, Network Traffic Analysis. . Anthony Pell
Oct 23, 2003
•
Network Security
83
security advisorydenial of servicenetwork trafficUniversity of Wisconsin Netgear Router DoS Attack: Design Flaw Overview
A design flaw in a router product has seen the University of Wisconsin's network bombarded with network time protocol synchronisation requests, in an accidental denial of service (DoS) attack. The university's administrators noticed a dramatic increase in in-bound traffic to . . . . A design flaw in a router product has seen the University of Wisconsin's network bombarded with network time protocol synchronisation requests, in an accidental denial of service (DoS) attack. The university's administrators noticed a dramatic increase in in-bound traffic to its time server, and eventually traced the cause to a Netgear router product. A full analysis was posted on the university's Web site. The router was hard-coded to synchronise its clock to the university's time server, meaning that every unit sold and deployed began bombarding the machine with requests as often as once a second. "I have counted more than 500,000 unique Netgear sources that queried our time server in one day. This measurement likely underestimates the actual count," the analysis read. "As of June 30, 2003, Netgear reported a total of 707,147 affected products manufactured." The link for this article located at ZDNet is no longer available. . A vulnerability in a router resulted in a denial-of-service incident at the University of Wisconsin, triggered by an overload of sync requests.. Netgear Attack, Router DoS Incident, Network Security Challenge. . LinuxSecurity.com Team
Aug 26, 2003
•
Hacks/Cracks
74
network securitynetwork trafficsecurity best practicesNetwork Security Strategies: Understanding TCP/IP and Firewalls
If you are reading this article, you should have a good understanding of how computers work and a working knowledge of how to use Internet tools such as web browsers, Telnet, and e-mail. In addition, you're probably already aware of the . . . . If you are reading this article, you should have a good understanding of how computers work and a working knowledge of how to use Internet tools such as web browsers, Telnet, and e-mail. In addition, you're probably already aware of the need to protect computers on your network from exterior threats, while still allowing your web and e-mail traffic to traverse your connection to the Internet. You may install a firewall to secure your network, but to configure it correctly you must know just how your computer connects to other computers and downloads web pages, exchanges e-mail, or establishes a Telnet session. You'll also need to know how to set firewall rules to differentiate the legitimate network traffic of your network users from the illicit access of hackers and other external threats. As TCP/IP is the mechanism by which your computer communicates with the rest of the Internet, you will need to have more than a passing familiarity with it. This article will give you a better idea of what is going on behind the scenes. But why do you care how TCP/IP works if you aren't a computer programmer or network engineer? You should care, because the hackers attempting to get past your network security often are computer programmers or network engineers (self-taught or otherwise), and in order to stop them you need to understand and correct the weaknesses in TCP/IP or higher-level protocols that they will attempt to exploit. In other words, know what your enemy knows. The link for this article located at Hacking Linux Exposed is no longer available. . If you are reading this article, you should have a good understanding of how computers work and a wo. reading, article, should, understanding, computers. . Anthony Pell
Jul 06, 2003
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!