Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 0 articles for you...
67
authenticationcompromiseSSHPreventing SSH Brute Force Attacks and Strengthening Weak Passwords
One common and stupidly simple way hosts are compromissed is weak SSH passwords. You would think people have learned by now, but evidently there are still enough systems with root passwords like 12345 around to make scanning for them a worthwhile exercise. . As a result, one of my favorite honeypot tools is kippo, and we have talked about the tool before. I figured it is a good time again to write a quick update on some recent compromisses. Unauthorized access attempts via SSH expose vulnerabilities in password strength, underscoring the importance of implementing robust authentication techniques.. SSH Attacks, Password Strength, Brute Force Protection. . LinuxSecurity.com Team
Jul 26, 2013
•
Cryptography
83
network protectionsecurity awarenessnetwork attackIncreased SSH Brute Force Threat: Protect Your Network Immediately
SSH brute force attempts seem to be on the rise again, at the SANS Internet Storm Center we have received a number of reports that a number of networks are seeing them. The source IP addresses vary with each new attempted username in the wordlist, which would indicate that the attempts are distributed through botnet(s). . It only takes a single user with a weak password for a breach to occur, then with that foothold escalation and further attacks are likely next. This is certainly not a new phenomenon, however I think it is a good time to raise awareness about it once again. Reader xemaps wrote in with this log snippet: "Whole day my server has been targeted by a botnet, attacker also changed ip each new dictionary user." Jun 17 23:02:03 pro sshd[17444]: Invalid user mailer from 217.37.x.x Jun 17 23:03:24 pro sshd[17460]: Invalid user mailer from 87.66.x.x Jun 17 23:05:27 pro sshd[17617]: Invalid user mailman from 89.97.x.x Jun 17 23:09:30 pro sshd[17639]: Invalid user mailtest from 62.2.x.x Jun 17 23:15:44 pro sshd[17894]: Invalid user maker from 83.236.x.x Jun 17 23:16:47 pro sshd[17925]: Invalid user mama from 84.73.x.x The link for this article located at SANS is no longer available. . SSH password exploitation is on the rise; understand how inadequate passwords result in security violations and threats.. Rising SSH Attempts, Protect Network From Attacks, Password Security Awareness. . LinuxSecurity.com Team
Jun 18, 2010
•
Hacks/Cracks
77
network securitysecurity assessmentpassword crackingEvaluating Password Security Policies For Network Defense
Great article on cracking passwords, including info from Bruce Schneier. Don't forget about l0phtcrack for some serious 64-bit auditing and recovery. What tools do you use? Roger Grimes presents a useful tool for figuring out how susceptible your network might be to a password-cracking attack. Most password-cracking scenarios focus on attacks that convert a captured hash to its plain-text password equivalent using an offline attack and hash or rainbow table database. Capturing password hashes assumes a lot. In most cases, the attacker must have highly privileged access (admin or root) to get to the hashes; if they do, they can inflict much more other damage. So why just discuss password cracking? . Further, in the Windows world, a remote attacker must have local administrator access on a computer and NetBIOS access, which is often blocked by the perimeter firewall. Despite popular belief, today's Windows logon password hashes cannot be sniffed off the wire. Plus, if an attacker can get the hash, he or she can conduct a "pass-the-hash" attack and not worry about converting it in the first place. The link for this article located at InfoWorld is no longer available. . Investigate techniques to evaluate the robustness of your password guidelines in light of possible hacks and decryption efforts.. Password Security, Policy Assessment, Cracking Methods, Network Security. . LinuxSecurity.com Team
May 27, 2009
•
Server Security
74
attack preventionserver protectionssh securityPreventing Brute Force Attacks: Strengthen SSH on Linux Servers
Sysadmins have begun noticing a coordinated attack on servers with open SSH ports that tries to stay under the radar by only attempting to guess a password three times from any compromised machine. Instead of mounting an attack form a single compromised host, hackers have worked out a means to relay a brute force attack between multiple assault machines. Do you have SSH open on your Linux machine? If so make sure that all your user's passwords are strong. Check out your system logs and see if attackers are trying to guess your passwords.. The link for this article located at channelregister is no longer available. . Recognizing synchronized brute-force login attempts targeting vulnerable credentials on UNIX systems and the significance of log surveillance.. ssh security,password management,server attack prevention. . Bill Locke
Jul 14, 2008
•
Network Security
67
security advisorynetwork securitythreat analysisSSH Encryption Security Risks from Advanced Pattern Recognition Threats
Network security company SSH Communications said Friday that it is investigating claims that advanced pattern recognition can be used to weaken the security around an encryption standard used to protect connections between computers. The standard, known as secure shell, or SSH, . . . . Network security company SSH Communications said Friday that it is investigating claims that advanced pattern recognition can be used to weaken the security around an encryption standard used to protect connections between computers. The standard, known as secure shell, or SSH, encrypts the data traveling between an administrator's computer and a remote server, allowing for much more secure communications, even over the Internet. That security, however, was called into question at a technical security conference last week, when three University of California-Berkeley researchers outlined a process by which guessing passwords sent using SSH can be made an estimated 50 times easier. While the company acknowledged the research, SSH Communications called the problems highlighted by the paper "theoretical." The link for this article located at CNET News.com is no longer available. . Network security company SSH Communications said Friday that it is investigating claims that advance. network, security, company, communications, friday, investigating, claims, advance. . LinuxSecurity.com Team
Aug 28, 2001
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!