Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 36 articles for you...
212
open source projectsecurity upgradenetworking enhancementCilium 1.14 Delivers Enhanced Networking And Security Features
Cilium , an open-source networking, security and observability project, has released version 1.14 with an array of connectivity, security and observability updates. The Cilium 1.14 update also introduces new mesh capabilities, high-speed networking and security enhancements. . “Cilium is quickly growing beyond Kubernetes and beyond container networking ,” Thomas Graf, founder of Cilium and CTO of Isovalent, told SDxCentral. “It is becoming an overall cloud-native connectivity platform meeting enterprise-grade standards.” To date, Cilium has been largely used alongside the Kubernetes container orchestration platform, but the 1.14 release unshackles it to enable much broader networking use cases. Cilium is an open-source project hosted by the Cloud Native Computing Foundation (CNCF) , with commercial support from startup Isovalent (formerly known as Covalent). At the core of Cilium is the use of the eBPF (extended Berkeley Packet Filter), which is a Linux kernel technology that can be used for networking security and observability. The Cilium project got started in 2015 and has grown significantly over the years, now counting IKEA, the New York Times and Bloomberg among its users. . Cilium 1.14 boosts networking, protection, and visibility, extending its reach beyond Kubernetes to cater to various cloud-native applications.. Cilium, Networking, Security Enhancements, Cloud-Native Connectivity, Open Source. . Brittany Day
Jul 29, 2023
•
Cloud Security
79
open source projectsoftware assessmentcriticality scoreOpen Source Security Foundation Launches Criticality Score 2.0 for Projects
Back in 2020 Google and the Open-Source Security Foundation (OpenSSF) came up with a "Criticality Score" to rank the importance/criticality of open-source projects. The Criticality Score is a means of quantifying the importance of an open-source project such as if in need of funding or development assistance. Criticality Score 2.0 has now been published. . The Criticality Score takes into account the age of the codebase/repository, the contributor count, commit frequency, the number of releases in the past year, the number of closed and updated issues in the last 90 days, the comment frequency, the number of project mentions in commit messages, and other parameters to come up with a numerical representation between 0 and 1 for how critical a project is by this standard. The Criticality Score software can compute the score based on a GitHub repository URL. The Criticality Score software is maintained by the Open Source Security Foundation's "Securing Critical Projects" working group. Among the most critical C language projects on GitHub are Git, the Linux kernel, PHP, OpenSSL, systemd, and curl. For the most critical Rust-written projects the list includes Rust itself, Servo, Cargo, rust-analyzer, and others. The most critical PHP projects include Symfony, Magento2, Joomla, and the Laravel Framework. Topping the Python criticality list includes the likes of SaltStack Salt, Home-Assistant Core, CPython, Scikit-Learn, and Numpy. The link for this article located at Phoronix is no longer available. . The Relevance Index assesses project maturity and developer engagement to prioritize open-source initiatives accurately.. Open Source Projects,Criticality Score,Software Assessment. . LinuxSecurity.com Team
Feb 27, 2023
•
Security Projects
79
open source projectchromiumlanguage featuresRust's Impact on Chromium and Servo in Open Source Projects
Rust is the language we are all expecting to save us and it has just scored two more goals. The Chromium project has decided to support it and Mozilla, the original home of Rust, has a revitalized Servo project. . Rust making inroads into Linux is amazing in itself as Linus Torvalds has been a C fanatic for a very long time. As a result the only language to use for the Linux kernel was C, but now Rust is making its way in. Such modest, but important, gains are the sort of thing that sees a language thrust from the hands of the enthusiastic early adopters to the mainstream. Now we have news that Rust has joined another "big" project - Chromium - the open source part of Chrome and Edge. . Go is achieving significant advancements in Windows and proprietary software initiatives, improving Firefox and invigorating the development of WebAssembly.. Rust Programming, Open Source Development, Chromium Support. . LinuxSecurity.com Team
Jan 19, 2023
•
Security Projects
79
open source projectGooglemachine learningKataOS Unveiling: Secure OS For Embedded Machine Learning
Google, one of very few tech companies willing to experiment with new operating systems, has unveiled KataOS for embedded machine learning devices. . KataOS was announced along with Sparrow on the Google Open Source blog . KataOS is the operating system design and Sparrow is the reference implementation, as the Weston display server is the reference implementation of Wayland. The plan is that KataOS will be "a provably secure platform that's optimized for embedded devices that run ML applications." Google is working with Antmicro, which created the seL4-sys crate. Currently the OS is being developed on the Arm64 instruction set, but the plan is to run it on openTitan , which uses RISC-V. . KataOS, introduced alongside Sparrow, serves as a fortified operating system tailored for ML embedded devices. Explore its functionalities and the journey of its creation.. KataOS, Google Operating System, Embedded Machine Learning, Open Source Project. . LinuxSecurity.com Team
Oct 20, 2022
•
Security Projects
79
critical infrastructureopen source projectIT servicesGNU Toolchain Infrastructure Migrates To Linux Foundation Services
The GCC compiler and related GNU toolchain infrastructure has long been hosted by Sourceware.org that has been sponsored by Red Hat the past two decades. But now the GNU Toolchain Infrastructure (GTI) project is being established as it works to leverage the Linux Foundation's IT services to provide more robust and secure infrastructure for these critical open-source projects. . With the Linux Foundation IT services doing a stellar job hosting Kernel.org and related web server infrastructure for the Linux kernel, the various parties involved in the GNU toolchain have been sorting out a similar setup. The link for this article located at Phoronix is no longer available. . The Python Software Foundation announces a partnership with the Open Source Initiative, pledging improved accessibility and enhanced features.. Gnu Toolchain, Linux Foundation, Infrastructure Services, GCC Compiler, Open Source. . LinuxSecurity.com Team
Sep 30, 2022
•
Security Projects
79
security improvementsecurity initiativeopen source projectSOS.dev Initiative Aims to Improve Open Source Security and Resilience
SOS.dev initiative will combat software supply chain attacks by encouraging researchers to suggest security improvements to key projects. . A new program is aiming to reward developers and security researchers who make improvements to critical infrastructure based on open source technology. The Secure Open Source Rewards ( SOS.dev ) scheme will be broader than current bug bounty programs, according to its backers. The program will “harden critical open source projects” and help protect against application and software supply chain attacks by encouraging researchers and developers to suggest security improvements. Rewards range from $505 for small improvements up to $10,000 or more for “complicated, high-impact and lasting improvements that almost certainly prevent major vulnerabilities”. . A fresh initiative seeks to incentivize programmers and cybersecurity experts who enhance vital open-source endeavors.. Secure Open Source, Developer Rewards, Software Security, Supply Chain Protection. . LinuxSecurity.com Team
Aug 19, 2022
•
Security Projects
79
open source projectcode cleanupsystem optimizationIngo Molnar's Initiative on Linux Kernel Header Dependencies Cleanup
Cleaning off decades of code mess isn't for the faint of heart, but leading Linux kernel developer Ingo Molnar is giving it the old college try in the Linux kernel. The result will make it easier and quicker than ever to make improvements, patches, and add features to Linux. . Last year, Linux's source code came to a whopping 27.8 million lines of code . It's only gotten bigger since then. Like any 30-year old software project, Linux has picked up its fair share of cruft over the years. Now, after months of work, senior Linux kernel developer Ingo Molnar is releasing his first stab at cleaning it up at a fundamental level with his "Fast Kernel Headers" project. The object? No less than a comprehensive clean-up and rework of the Linux kernel's header hierarchy and header dependencies. Linux contains many header, .h, files. To be exact there are about 10,000 main .h headers in the Linux kernel with the include/ and arch/*/include/ hierarchies. As Molnar explained, "Over the last 30+ years they have grown into a complicated & painful set of cross-dependencies we are affectionately calling 'Dependency Hell'." . Comprising 27.8 million lines of code, the initiative to streamline the Linux kernel is designed to facilitate enhancements and strengthen functionalities.. Kernel Development, Open Source, Code Cleanup, System Optimization, Header Management. . LinuxSecurity.com Team
Jan 05, 2022
•
Security Projects
79
security solutionsmemory safetyopen source projectISRG's Prossimo: Memory-Safe Internet Solutions Through Rust
The Internet Security Research Group (ISRG) 's new Prossimo project seeks to make many basic internet programs and protocols memory-safe by rewriting them in Rust . . You know the non-profit Internet Security Research Group (ISRG) for its Let's Encrypt certificate authority, the most popular way of securing websites with TLS certificates. The group wants to do more. Its newest project, Prossimo , seeks to make many basic internet programs and protocols memory-safe by rewriting them in Rust . Rust, like some other memory-safe programming languages such as Go and Java, prevents programmers from introducing some kinds of memory bugs. All too often memory safety bugs go hand-in-hand with security issues. Unfortunately, much of the internet's fundamental software is written in C, which is anything but memory safe. . Explore the efforts of ISRG's Prossimo in advancing online security by reengineering protocols using Rust, aimed at eliminating memory-related vulnerabilities.. memory safe programming, ISRG Prossimo, Rust framework, internet security improvements, secure coding practices. . LinuxSecurity.com Team
Nov 10, 2021
•
Security Projects
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!