Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
210
security advisoryhigh severityDoS attackOpen vSwitch Critical: CVE-2023-1668 DoS Attack Advisory
It was discovered that Open vSwitch could be made to stop forwarding packets if it received specially crafted network traffic (CVE-2023-1668). Due to its high availability impact and the low attack complexity required to exploit the bug, this vulnerability has received a National Vulnerability Database (NVD) base score of 8.2 out of 10 (“High” severity). . A remote attacker could possibly use this issue to cause a denial of service (DoS), resulting in loss of access to your critical systems. An important update for Open vSwitch that fixes this dangerous vulnerability has been released. We urge all impacted users to apply the Open vSwitch updates issued by their distro(s) now to protect against attacks leading to loss of access and potential compromise. To stay on top of important updates released by the open-source programs and applications you use, be sure to register as a LinuxSecurity user , then subscribe to our Linux Advisory Watch newsletter and customize your advisories for the distro(s) you use. This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . An external intruder could take advantage of this vulnerability to initiate a denial of service (DoS) attack, resulting in the unavailability of your systems.. DoS Attack, Open vSwitch Vulnerability, Network Security Update. . Brittany Day
May 12, 2023
•
Security Vulnerabilities
77
malwarecyber attacksecurity threatGoldBrute Botnet Escalates Attacks On RDP Servers Worldwide
Security researchers have discovered an ongoing sophisticated botnet campaign that is currently brute-forcing more than 1.5 million publicly accessible Windows RDP servers on the Internet. . Dubbed GoldBrute, the botnet scheme has been designed in a way to escalate gradually by adding every new cracked system to its network, forcing them to further find new available RDP servers and then brute force them. To fly under the radar of security tools and malware analysts, attackers behind this campaign command each infected machine to target millions of servers with a unique set of username and password combination so that a targeted server receives brute force attempts from different IP addresses. . Dubbed GoldBrute, the botnet scheme has been designed in a way to escalate gradually by adding every. security, researchers, ongoing, sophisticated, botnet, campaign, currently. . LinuxSecurity.com Team
Jun 07, 2019
•
Server Security
74
security researchcorporate securityattack vectorFabian Yamaguchi Uncovers Network Flaws and Attack Strategies at 26C3
At the 26th Chaos Communication Congress (26C3) in Berlin, security researcher Fabian Yamaguchi demonstrated a number of vulnerabilities that can apparently be found in many average communication networks and affect all levels from the access layer to the application layer. Attackers exploit many minor design flaws which allow "dangerous attacks" when combined, explained the Berlin-based security expert who last year investigated vulnerabilities in the basic TCP internet protocol. Overall, the "bugs" can reportedly be exploited to hijack a proxy server such as Squid and control all of the network traffic that flows through it.. Yamaguchi explained that typical corporate networks, for instance, include a "demilitarised zone" (DMZ) with restricted access to the connected servers. Attackers who compromise a system within this zone have no access to local networks yet, said the researcher. This requires getting over a firewall, he added. It therefore makes little sense to directly attack a machine installed in this zone, said Yamaguchi. A detour via one of the system's clients, which are surrounded by a "zoo of technologies" such as Flash, media players or chat systems, tends to be the much more promising option. To demonstrate, "fabs" chose the Pidgin instant messaging software, where emoticons in MSN Chat are apparently known to be particularly vulnerable to attacks. According to the security expert, the software's "shoddy" protocol replaces character strings and word strings with images, allowing a more or less unrestricted variety of symbols to be displayed. The protocol's flawed encoding of a text in binary enabled Yamaguchi to download an executable program and eventually gave the researcher a first foothold in the network. The link for this article located at H Security is no longer available. . Yamaguchi explained that typical corporate networks, for instance, include a 'demilitarised zone' (D. chaos, communication, congress, (26c3), berlin, security, researcher, fabian, yamaguchi. . Anthony Pell
Dec 29, 2009
•
Network Security
74
networkingsecurity assessmentwireless securityGOP Convention: Unsecured Wireless Networks Identified By Audit
Republicans and Democrats may hold to different ideologies, but they're pretty much the same -- lame -- when it comes to locking down wireless, a Boston-area firm said Thursday. As it did in late July when the Democrats held their convention in Boston, Newbury Networks, a provider of location-based wireless security solutions, conducted a "wardrive" around Madison Square Garden, the site of the Republican National Convention that wraps up today. . . .. Republicans and Democrats may hold to different ideologies, but they're pretty much the same -- lame -- when it comes to locking down wireless, a Boston-area firm said Thursday. As it did in late July when the Democrats held their convention in Boston, Newbury Networks, a provider of location-based wireless security solutions, conducted a "wardrive" around Madison Square Garden, the site of the Republican National Convention that wraps up today. Newbury's casual cruise on August 24 found thousands of unsecured wireless access points and adapters and hundreds of vulnerable wireless networks near Madison Square Garden. The link for this article located at Gregg Keizer is no longer available. . The digital infrastructure at political rallies often lacks proper safeguards, leaving networks open to attack.. Wireless Security Solutions, Unsecured Networks, Wireless Access Points, Network Assessment. . Anthony Pell
Sep 03, 2004
•
Network Security
74
wireless securityhacking toolpassword attackAsleap: New Tool for Cracking Cisco LEAP Network Passwords
The tool, called "Asleap," allows users to scan the wireless network broadcast spectrum for networks using LEAP (Lightweight Extensible Authentication Protocol), capture wireless network traffic and crack user passwords, according to a message posted to the Bugtraq online security discussion group on Wednesday. . . .. One day after it disclosed a security vulnerability in a wireless networking product, Cisco Systems Inc. must contend with a new threat - the long-promised release of a hacking tool that targets wireless networks running its LEAP wireless authentication protocol. The tool, called "Asleap," allows users to scan the wireless network broadcast spectrum for networks using LEAP (Lightweight Extensible Authentication Protocol), capture wireless network traffic and crack user passwords, according to a message posted to the Bugtraq online security discussion group on Wednesday. The link for this article located at ISG is no longer available. . One day after it disclosed a security vulnerability in a wireless networking product, Cisco Systems . called, 'asleap, allows, users, wireless, network, broadcast, spectrum, networks. . Anthony Pell
Apr 12, 2004
•
Network Security
74
security techniquenetwork scanningnetwork vulnerabilityExploring Stealth Scans' Role In System Security Insights
This week's column is a basic primer on scanning: what it is, why it's done, and the wonderful world of "secret handshakes" and stealth scans. Scanning a system, or a network, is normally done in order to find out what . . . . This week's column is a basic primer on scanning: what it is, why it's done, and the wonderful world of "secret handshakes" and stealth scans. Scanning a system, or a network, is normally done in order to find out what services are available. But remember, there are two groups who do it regularly. The good guys -- system administrators and network security folk -- do it to see what is exposed and thus vulnerable to attack. The bad guys -- script kiddies and worse -- do it to see what is exposed and thus vulnerable to attack. Funny, that is. Scanning is like going up to an apartment building and knocking on each door to see who is home. Are you running a Web server? A mail server? BIND? Telnet? FTP? RPC? Those are the questions that scanning answers. Unfortunately, the answers often reveal enough about your system to allow an uncouth visitor unauthorized access. The link for this article located at LinuxWorld is no longer available. . An overview of assessment methodologies, revealing infrastructures to identify weaknesses and threats in digital environments.. Network Scanning, Stealth Scans, System Scanning, Security Techniques. . Anthony Pell
Mar 22, 2001
•
Network Security
83
corporate securitysecurity analysisinternet threatMicrosoft Attack Exposes Corporate Access Risks and Technology Issues
The attack on Microsoft underscores that corporate networks are still widely vulnerable to hackers, security analysts say. Even as companies shore up security in some areas, new technologies--such as Web-based email and broadband DSL and cable Internet connections--create new vulnerabilities.. . .. The attack on Microsoft underscores that corporate networks are still widely vulnerable to hackers, security analysts say. Even as companies shore up security in some areas, new technologies--such as Web-based email and broadband DSL and cable Internet connections--create new vulnerabilities. Worse, the increased dependence on notebook-carting employees taking work home or on the road creates gaping holes through which even the most unsophisticated of hackers can bypass corporate security measures. The link for this article located at News.com is no longer available. . Emerging tech amplifies risks within business infrastructures, uncovering obstacles that cybercriminals readily take advantage of.. Corporate Networking,Cybersecurity Challenges,Internet Vulnerabilities. . LinuxSecurity.com Team
Oct 30, 2000
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!