Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 59 articles for you...
67
data securitysecure communicationopen source toolSecure Your Files with Cow-Encryptor on a Linux System Easily
Secure your documents, notes, and plaintext passwords on Linux by turning the text into a series of "moos" using Cow-encryptor. . Encrypting your documents is a serious endeavor that keeps your secrets hidden from prying eyes. Add some farmyard levity to your text files with Cow-encryptor: a lightweight app that transforms words into the nonsensical lowing of a dairy herd. Encryption is a way of scrambling data, that makes it unreadable without the decryption key or password, and you use it to make sure that your personal documents, financial information, and your secret diary remain inaccessible to anyone but you. . Protect your files on Linux with Bovine-crypt, transforming your words into playful tones while concealing your confidential information.. Linux Document Encryption, Secure Notes Tool, Open Source Encryption. . LinuxSecurity.com Team
May 06, 2023
•
Cryptography
74
network securitydata interceptionopen source toolWi-Fi Design Flaw Allows Data Interception on Linux and Other OS
Apple’s decision to support MAC Address Randomization across its platforms may provide some degree of protection against a newly-identified Wi-Fi flaw researchers say could let attackers hijack network traffic . iOS, Linux, and Android devices may be vulnerable. . The researchers have identified a fundamental flaw in the design of the IEEE 802.11 Wi-Fi standard attackers could exploit to trick access points (Wi-Fi base stations) into leaking information. The researchers do not claim the vulnerability is being actively exploited, but warn that it might enable the interception of network traffic. The attack exploits an inherent vulnerability in the data containers (network frames) routers rely on to move information across the network and how access points handle devices that enter power-saving mode. To achieve the attack, miscreants must forcibly disconnect the victim device before it properly connects to the network, spoof the MAC address of the device to connect to the network using the attacker’s credentials, then grab the response. The vulnerability exploits on-device power-save behavior within the Wi-Fi standard to force data to be shared in unencrypted form. The researchers have published an open source tool called MacStealer to test Wi-Fi networks for the vulnerability. . Research reveals a significant vulnerability within the Wi-Fi's IEEE 802.11 protocol, posing threats to data protection on devices running iOS, Linux, and Android systems.. Wi-Fi Flaw, IEEE 802.11, Linux Security, Network Data Threat. . Brittany Day
Apr 02, 2023
•
Network Security
79
security testingLinux distributionopen source toolKali Linux 2023.1 Celebrates Ten Years of Security Testing
The developers of specialized security-testing distro Kali Linux have released the first version of 2023, which marks the project's tenth anniversary… but only in this incarnation. . The new version, release 2023.1 , appears exactly one decade after version 1.0 was released on March 13th 2013. Kali Linux is a rebuild of an earlier distro called BackTrack , first rolled out 17 years ago, which was based on WHAX, first out 18 years back, which is in turn based on Whoppix. Suffice to say, it goes back a long while. Kali rates highly on Distrowatch – it's currently at number 18, pop-pickers – which we ascribe mainly to its appearances on TV show Mr Robot and the consequent perception that this is a cool tool for élite hackers penetration testers and other security professionals. For the type of people it targets , it's a handy time-saver. It has a bewildering variety of tools , and when installing, you can choose whether you want them all built in, or just a core set. Frankly, the Reg FOSS desk is not an élite hacker and has never worked as a pen-tester – although he has warned some large companies about holes in their network security before now. . The latest iteration, 2023.1, commemorates ten years since the debut 1.0 launch of Kali Linux, a widely-used tool for cybersecurity assessment.. Kali Linux, Pentesting Tools, Security Testing, Linux Distribution, Open Source. . LinuxSecurity.com Team
Mar 16, 2023
•
Security Projects
83
open source toolcybersecurity frameworkcommand and controlAdoption of Sliver C2 Increases Among Cyber Threat Actors Today
An increasing number of threat actors have started relying on the command-and-control (C2) framework Sliver as an open-source alternative to tools such as Metasploit and Cobalt Strike. . Security researchers at Cybereason described the new phenomenon in an advisory published last Thursday, adding that Sliver is gaining popularity due to its modular capabilities (via Armory), cross-platform support and vast number of features. “Sliver C2 is getting more and more traction since its release in 2020,” reads the report. “As of today, the number of threat intelligence reports is still low, and the main reports describe the use of the Russian SVR leveraging Sliver C2.” In particular, the team said it already noticed Sliver with known threat actors and malware families such as BumbleBee and APT29 (also known as Cozy Bear). . Experts at Security Inc. have highlighted the growing popularity of the Sliver command and control (C2) framework among cybercriminals.. Sliver C2, Cybersecurity Framework, Open Source Tools. . LinuxSecurity.com Team
Jan 24, 2023
•
Hacks/Cracks
83
cyber attacksopen source toolsource codeDragonSpark Cyber Espionage: Golang Utilization in East Asia Attacks
A Chinese-speaking hacking group tracked as ‘DragonSpark’ was observed employing Golang source code interpretation to evade detection while launching espionage attacks against organizations in East Asia. . The attacks are tracked by SentinelLabs , whose researchers report that DragonSpark relies on a little-known open-source tool called SparkRAT to steal sensitive data from compromised systems, execute commands, perform lateral network movement, and more. The threat actors leverage compromised infrastructure in China, Taiwan, and Singapore to launch their attacks, while the intrusion vector observed by SentinelLabs is vulnerable MySQL database servers exposed online. . PhantomStrike employs Python code obfuscation to remain undetected during surveillance missions aimed at Southeast Asian organizations.. DragonSpark Espionage, Golang Interpretation, East Asia Cyber Attacks, Open Source Malware. . LinuxSecurity.com Team
Jan 24, 2023
•
Hacks/Cracks
74
network managementopen source toolsecurity utilityThe Best 10 Linux Tools for Effective Network and Security Management
Picking just 10 Linux open source security tools isn’t easy, especially when network professionals and security experts have dozens if not several hundred tools available to them. . There are different sets of tools for just about every task—network tunneling, sniffing, scanning, mapping. And for every environment— Wi-Fi networks , Web applications, database servers. We consulted a group of experts (Vincent Danen, vice president of product security, RedHat; Casey Bisson, head of product growth, BluBracket; Andrew Schmitt, a member of the BluBracket Security Advisory Panel; and John Hammond, senior security researcher, Huntress) to develop this list of must-have Linux security tools. . Delve into crucial Linux utilities tailored for network specialists, addressing functionalities such as network probing, topology visualization, and encrypted communication tunnels.. Linux Tools, Network Security, Open Source Tools, Security Utilities. . Brittany Day
Jan 15, 2023
•
Network Security
72
network protectionopen source toolsecurity applicationDiscover The 10 Best Free Linux Firewall Tools For Network Protection
For those who are serious about their network security, knowing which Linux firewall apps and solutions are available for free is crucial. . Setting up a firewall is key to securing your network perimeter. A firewall blocks sensitive ports and filters incoming and outgoing traffic to thwart malicious connections and ensure there is no unsolicited exchange of data. In the world of FOSS, there are plenty of firewall solutions to choose from. Here's a list of the best firewall solutions for fortressing your network on Linux. . Establishing a security barrier is crucial for protecting your network boundary. A firewall restricts access to critical ports and scrutinizes data flow.. Free Linux Firewall Tools, Network Security Solutions, Open Source Firewall Applications. . Brittany Day
Dec 14, 2022
•
Firewalls
76
log analysisopen source toolsysmonUsing Sysmon For Linux To Track MITRE ATT&CK Techniques Effectively
There was a lot covered at this year’s 2022 RhythmWorld Security Conference! In one of our more technical sessions, we discussed Microsoft Sysinternals’ recent release of Sysmon for Linux, an open-source Linux system monitoring tool. . You can find the project on their Github page to view the documentation and source; there are plenty of resources about how to download, install, and configure the Sysmon for Linux software. In this blog, we will cover the next steps you can take to use the logs that it generates, as well as where to best use them within LogRhythm SIEM. When assessing how Sysmon for Linux works, there are a lot of similarities to Sysmon for Windows in how it can be configured and how the logs are generated. Of course, with different operating system architectures, there are some changes, too. The link for this article located at Security Boulevard is no longer available. . Delve into Sysmon for Linux, a free and powerful monitoring utility that enables users to grasp and monitor various MITRE ATT&CK tactics efficiently.. open source monitoring, Sysmon for Linux, MITRE ATT&CK tracking, log management tool, Linux security solutions. . Brittany Day
Nov 09, 2022
•
Organizations/Events
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!