Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 0 articles for you...
74
cyber threatsnetwork protectionpharmingProtecting Your Home Router From Pharming Attacks Effectively Now
If you weren't worried enough about the security of your home computer and network, it may be time to step it up. A new study by Indiana University and Symantec has discovered (and, alas, made more public) a new hacking technique called "drive- by pharming." Of course, we can't use a name actually in the dictionary, but the gist of it is that your home router may be insecure. . First, keep in mind that a good percentage of home computers (and some business PCs) are wide open and already infected with "bot" software that turns them into zombies that spew out those millions of spam e-mails a day. So the first order of business for your computer has to be to clean and secure your PC. That means anti- virus, anti-spyware and anti-adware software needs to be front and center. Simultaneous to that you also need to be concerned about this "pharming" thing. In normal pharming, users are redirected from normal Web sites to bogus sites that contain malicious software code that infects or harms your PC. The link for this article located at RedOrbit news is no longer available. . Enhance your home and network safety by safeguarding your router against emerging cyber threats and pharming schemes.. Router Security,MALWARE PREVENTION,Home Network Safety,Cyber Measures. . Bill Locke
Feb 28, 2007
•
Network Security
83
online bankingscamsecurity threatNewly Emerging Pharming Threats in Online Banking Security Risks
If the phishers don't get you the pharmers will, police have warned. People are now getting wary of the scam called phishing - where people are sent emails claiming to be from their bank asking them to "confirm" their account details and passwords. . A recent phishing attack on Commonwealth Bank customers fooled very few people into disclosing their internet banking details. But now comes an even more dangerous scam called pharming, where hackers secretly redirect users' computers from financial sites to the scammers' fake sites that look almost exactly the same as the real ones. . A recent phishing attack on Commonwealth Bank customers fooled very few people into disclosing their. phishers, don't, pharmers, police, warned, people, getting. . LinuxSecurity.com Team
May 29, 2006
•
Hacks/Cracks
77
security advisorymalwarephishingSecure Science Advisory: Pharming Attack Exploiting SSL Vulnerability
Secure Science Corporation released an advisory regarding the fact that the latest Pharming techniques utilized within malware has broken SSL. Chapter 5 of Phishing Exposed, a book by Lance James, who happens to work for Secure Science, demonstrated this technique in his book as an upcoming threat that phishers will take advantage of. The report on how this SSL Pharming attack occurs can be found on the advisories page at Secure Science.. The link for this article located at Mal-aware.org is no longer available. . Cyber Alert unveils new malware danger utilizing SSL via Pharming methods in their recent advisory release.. SSL Disruption, Malware Attack, Phishing Techniques, Secure Science Advisory. . LinuxSecurity.com Team
Feb 15, 2006
•
Server Security
83
security advisorycyber threatpharmingHushmail: DNS Attack Leads to User Redirections and Service Disruption
Surfers trying to visit the web site of popular secure email service Hushmail were redirected to a false site early Sunday following a hacking attack. Hush Communications said hackers changed Hushmail's DNS records after "compromising the security" of its domain registrar (Network Solutions). These changes were undone after a few hours on Sunday and normal Hushmail services have now been restored. . During the period of the attack users visiting Hushmail.com were confronted by a defaced page (as captured by defacement archive Zone-h id 2309823) containing a jokey reference that The Secret Service is watching. Agent Leth and Clown Jeet 3k Inc. Things might have been far worse if hackers had used the ruse to set up a doppelganger site under their control for the purposes of obtaining the pass phrases needed to access the encrypted email service (a trick known as a pharming attack). As it was the impact of the attack was limited to lost email. In a statement, Hush Communications said: "There was no unauthorized access to any of the Hush servers. Data managed by Hush was not compromised. During this period, email sent to hushmail.com will not have been delivered. Please accept our sincerest apologies for the inconvenience this has caused. We take this incident very seriously, and will continue to update this page as more information becomes available." The link for this article located at The Register is no longer available. . During the period of the attack users visiting Hushmail.com were confronted by a defaced page (as ca. surfers, trying, visit, popular, secure, email, service, hushmail, redirected. . LinuxSecurity.com Team
Apr 27, 2005
•
Hacks/Cracks
83
data protectionmalwarecyber threatComprehending the Dangers of Pharming Attacks and DNS Poisoning
First came phishing scams, in which con artists hooked unwary internet users one by one into compromising their personal data. Now the latest cyberswindle, pharming, threatens to reel in entire schools of victims. Pharmers simply redirect as many users as possible from the legitimate commercial websites they'd intended to visit and lead them to malicious ones. The bogus sites, to which victims are redirected without their knowledge or consent, will likely look the same as a genuine site. But when users enter their login name and password, the information is captured by criminals. . "Phishing is to pharming what a guy with a rod and a reel is to a Russian trawler. Phishers have to approach their targets one by one. Pharmers can scoop up many victims in a single pass," said Chris Risley, president and chief executive officer of Nominum, a provider of IP address infrastructure technology for businesses. E-mailed viruses that rewrite local host files on individual PCs, like the Banker Trojan, have been used to conduct smaller-scale pharming attacks. Host files convert standard URLs into the numeric strings a computer understands. A computer with a compromised host file will go to the wrong website even if a user types in the correct URL. The most alarming pharming threat is DNS poisoning, which can cause a large group of users to be herded to bogus sites. DNS -- the domain name system -- translates web and e-mail addresses into numerical strings, acting as a sort of telephone directory for the internet. If a DNS directory is "poisoned" -- altered to contain false information regarding which web address is associated with what numeric string -- users can be silently shuttled to a bogus website even if they type in the correct URL. The link for this article located at wired.com is no longer available. . 'Phishing is to pharming what a guy with a rod and a reel is to a Russian trawler. Phishers have to . first, phishing, scams, which, artists, hooked, unwary, internet, users, comprom. .LinuxSecurity.com Team
Mar 14, 2005
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!