Security Vulnerabilities 
malware linux
malware linux IronWorm steals credentials and uses them to spread beyond the original victim, turning developer access into a supply chain risk. . A new campaign targeting npm has evolved past simple credential theft. Researchers identified IronWorm, a self-spreading threat. It harvests high-value Linux development secrets—SSH keys, cloud tokens, package publishing credentials. One compromised workstation becomes a launchpad for downstream supply chain attacks. This is not a get-in-and-get-out operation....
Jun 08, 2026
Network Securitysystem security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
83
malwareonline protectioninternet riskGizmodo Malware Warning: Protect Yourself From Online Threats
IT security and data protection firm Sophos is warning internet users who have visited the Gizmodo technology and gadget blog to scan their computers after it was revealed that the website was delivering adverts laced with malware last week.. According to a statement on the Gizmodo website, the blog's advertising team were tricked into accepting what they believed to be Suzuki adverts from a group of hackers. As a result, one of the world's most popular blogs - with more than 3.1 million page views per day - put users at risk of infection with what is believed to have been fake anti-virus software, designed to scam users out of their credit card details. Fake anti-virus software (also known as scareware) attempts to frighten users into believing that their computer is infected with viruses and Trojan horses by displaying bogus alerts, and then tricks unsuspecting surfers into making an unsafe purchase to remedy the "problem". The link for this article located at Sophos is no longer available. . According to a statement on the Gizmodo website, the blog's advertising team were tricked into accep. security, protection, sophos, warning, internet, users, visited, gizmodo. . LinuxSecurity.com Team
Oct 28, 2009
•
Hacks/Cracks
74
business continuitysecurity strategydomain hijackingUnderstanding Domain Hijacking Risks And Protection Strategies
Domain name hijacking broadly refers to acts where a registered domain name is misused or stolen from the rightful name holder. A domain hijacking is a security risk many organizations overlook when they develop security policy and business continuity plans. While name holders can take measures to protect their domain names against theft and loss, many measures are not generally known. . In one hijacking scenario, you begin the day as an e-merchant doing business online at 'www.onlineseller..' At 2:15 p.m. that afternoon, your visitor traffic and merchant transactions disappear. You investigate and discover someone’s impersonated your company’s administrative contact, transferred your domain name to a different registrar, and modified the DNS. Visitors to your domain name land at a hoax Web site that impersonates your virtual store. Improbable? It happened to Hushmail in April of this year. In another scenario, the email service you provide to thousands of users suddenly stops. You discover someone’s transferred your domain name to another registrar without your notice or consent. Your DNS configuration has been modified, and your user’s email is being delivered to someone else’s mail server. Hours later, your registration is restored, but only after an exhausting and frustrating incident response effort. Preposterous? It happened to PANIX back in January, 2005. Internet Corporation for Assigned Names and Numbers (ICANN) CEO Paul Twomey says that while “a domain hijacking is not as obvious a threat as spam and spyware, it can be just as disruptive to the business and operations of name holders; in extreme cases, a domain hijacking can have a lasting impact on an organization." The link for this article located at Security Pipeline is no longer available. . Domain theft poses risks for web enterprises; discover methods to safeguard your domain and avert loss.. Domain Name Protection, Online Security, Domain Theft Prevention. . Brittany Day
Aug 25, 2005
•
Network Security
74
network securityDDoSservice disruptionMitigating DDoS Attacks: Strategies for Online Services
Distributed denial of service (DDoS) attacks aim to disrupt the service of information systems by overwhelming the processing capacity of systems or by flooding the network bandwidth of the targeted business. Recently, these attacks have been used to deny service to commercial web sites that rely on a constant Internet presence for their business. . . .. Distributed denial of service (DDoS) attacks aim to disrupt the service of information systems by overwhelming the processing capacity of systems or by flooding the network bandwidth of the targeted business. Recently, these attacks have been used to deny service to commercial web sites that rely on a constant Internet presence for their business. The attacks differ from traditional DDoS attacks in the targeted nature and shear number of attacking hosts. Even hardened Internet companies such as the SCO group and Microsoft are not immune to attack, and historically high-profile etailers such as eBay have had their services disrupted. The threat from the latest attacks has become greater due to the political and financial agendas of those instigating them, particularly the involvement of international organised crime in protection extortion attempts. There is no simple solution to mitigate the risk of these attacks, but there are strategies that can help minimize the impact of a large-scale attack. The link for this article located at ebcvg.com is no longer available. . DDoS assaults hinder digital networks by inundating them with excessive traffic, posing critical challenges to cybersecurity.. DDoS Attack Strategies, Network Service Security, Information Systems Protection. . Anthony Pell
Jul 06, 2004
•
Network Security
78
security solutionsinternet commercee-commerce securityLLV Imports Trusts Guardian Digital For Enhanced E-Commerce Security
With no security breaches so far, LLV Imports is more than satisfied with products and support received from Guardian Digital. "Security is a huge concern of mine. Staying current with security patches and having an easy way to implement them is important to keeping my store and my customers' information secure. With Guardian Digital helping to manage our Internet presence, I can sleep well at night." . . .. Companies today understand the importance of e-commerce in the new economy. With the number of active Internet users approaching 640 million worldwide, the demand for products and services via the Internet is increasing rapidly. Guardian Digital Corporate Commerce Suite enables companies to meet this high demand and still focus on their core competencies rather than being concerned with how their online presence is functioning. LLV Imports (llvimports.com) is one such example. Founded in August 2002, they are a kitchenware, house decor and small furniture boutique. Manufactured in Vietnam and ISO 9001 certified, their products are sold and imported worldwide. Already established extensively throughout Asia, Europe, Africa and South America, introducing them to the United States marketplace was the next logical step. Relying mostly on EBay to advertise, showcase and sell their products, Larry Nguyen, owner of LLV Imports, turned to Guardian Digital for a cost-effective, easy and secure e-commerce solution. The link for this article located at Guardian Digital is no longer available. . Online safety is essential for retail triumph; XYZ Commerce relies on SecureNet for protected web transactions.. E-Commerce Security, Online Store Protection, Digital Storefront Solutions. . LinuxSecurity.com Team
Mar 07, 2004
•
Vendors/Products
82
cybersecurity educationfraud preventiononline protectionU.S. Government Launches Nationwide Internet Security Initiative
Consumers who ignore advice about how to protect themselves against hackers, viruses and fraudsters online will soon find it harder to tune out thanks to a nationwide media blitz being crafted by the Department of Homeland Security and a group of . . . . Consumers who ignore advice about how to protect themselves against hackers, viruses and fraudsters online will soon find it harder to tune out thanks to a nationwide media blitz being crafted by the Department of Homeland Security and a group of high-tech companies. The advertising campaign is designed to educate home and small business computer users about the importance of using firewalls and anti-virus software, as well as defending against online fraud. It is expected to debut next year on television and radio spots and in magazines, newspapers and movie theaters throughout the country. The $1.8 million program is the brainchild of officials at the Homeland Security Department and the National Cyber Security Alliance, a group of more than 50 technology companies including America Online, Apple, Cisco, Microsoft, and Symantec Corp. The group plans to begin producing the campaign next year with the help of celebrities and prominent spokespeople. The link for this article located at WashingtonPost is no longer available. . Consumers who ignore advice about how to protect themselves against hackers, viruses and fraudsters . consumers, ignore, advice, about, protect, themselves, against, hackers, viruses, fraudsters. . Anthony Pell
Oct 24, 2003
•
Government
83
security advisoryhackersecurity awarenessDeceptive Duo Hacks Gartner: An Urgent Call for Enhanced Security
In what has now become almost a daily occurence, the Deceptive Duo takes out another high-profile web site. ser lancilot sent in comments on their most recent defacement. "Many recent cyberattacks could have been avoided if enterprises were more focused on their security efforts, but users seem not to learn from their mistakes" these words were just pronounced by Richard Mogull, research director for the famous Gartner Institute.. . .. In what has now become almost a daily occurence, the Deceptive Duo takes out another high-profile web site. ser lancilot sent in comments on their most recent defacement. "Many recent cyberattacks could have been avoided if enterprises were more focused on their security efforts, but users seem not to learn from their mistakes" these words were just pronounced by Richard Mogull, research director for the famous Gartner Institute. What better challenge for the Deceptive Duo, the patriot hacker group that since a week is putting under pressure American servers to demonstrate their weakness. After FAA, a bunch of banks, the Sandia Labs, Nasa and some airlines websites, this was the time of the Gartner Institute. The attacked website mirror can be found at Gartner recently declared that 'until 2005 some 90% of cyberattacks will continue to exploit known security flaws for which a patch is available or a preventive measure known'. In fact this theory was validated by The Deceptive Duo using a known Netbios Brute Force attack method which allowed them to hack Gartner's servers in a mere 45 minutes (informations released by the same Duo). When next time Richard Mogull will publish a research on how many Americans are wearing safety belts while driving, Zone-H hopes that he will be classifiable in the "fastening" category... . Cunning Pair launches another wave of cyber assaults, prompting companies to bolster their cybersecurity measures.. Cyberattack Trends, Hacker Activities, Security Measures, Online Protection. . LinuxSecurity.com Team
May 02, 2002
•
Hacks/Cracks
74
network securitydoSonline protectionProtect Your Network: Ten Steps Against DoS and DDoS Attacks
DoS and DDoS (denial-of-service and distributed denial-of-service) attacks, which prevent legitimate users from accessing and using a site or particular service, have become a growing concern as more and more businesses move onto the Internet. Last year, retail giant Amazon.com, electronic . . . . DoS and DDoS (denial-of-service and distributed denial-of-service) attacks, which prevent legitimate users from accessing and using a site or particular service, have become a growing concern as more and more businesses move onto the Internet. Last year, retail giant Amazon.com, electronic auction house eBay, discount retailer Buy.com, CNN Interactive, and the portal Yahoo! made headlines when they were the recipients of these attacks, and now smaller businesses are beginning to recognize the dangers these attacks pose, too. Until managed availability monitors have been perfected, site owners need to take specific steps to ensure their systems are protected from DoS/DDoS attacks. In seeking to prevent DoS/DDoS attacks, every Web site has four areas of vulnerability: the gateway, the host, hardware/software, and personnel. The following recommendations address these four areas The link for this article located at Symantec is no longer available. . Implementing advanced traffic monitoring and analyzing tools can rapidly respond to DDoS attacks by identifying anomalies in network traffic patterns. DoS Security,DDoS Defense,Network Threat Mitigation,Online Business Protection. . Anthony Pell
Mar 28, 2001
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Discover faster search, smarter navigation, and deeper Linux security insights. Read More