Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 8 articles for you...
74
security toolsnetwork assessmentvulnerability scanNetwork Vulnerability Assessment With Nmap Tool for Administrators
What's on your network and how vulnerable is it to a hacker attack? Having a clear picture of this is a vital part of effective network administration, and one way to build up such a picture is by network mapping using a port scanner. Nmap is a powerful tool for helping identify areas in your network which needs to be tighten up. This articles talks about how you can identify these weaknesses by using Nmap.. The link for this article located at EnterpriseNetworkingPlanet is no longer available. . Delve into strategic network visualization and risk evaluation with Nmap to bolster overall defense.. Nmap, Network Scanning, Security Assessment, Vulnerability Tools. . Bill Locke
Dec 17, 2007
•
Network Security
78
open source softwaresecurity toolnetwork auditingSARA: Security Auditor's Research Assistant for Network Scanning
If you are an old school Linux or Unix user, you probably remember the System Administrator's Tool for Scanning Networks (SATAN). In 1995, SATAN brought browser-based network auditing to the world. Despite its initial splash, SATAN fell to the wayside due to lack of updates. Thanks to the kind folks at the Advanced Research Corp., SATAN is back, in the form of the Security Auditor's Research Assistant (SARA), a kinder, gentler, easier to use, and more updated auditing tool. . Installing SARA is simple. As long as you've got Perl and a Web browser, you're good to go. In fact, SARA even runs on Windows 2000/XP via a customized coLinux installation. Let's play it safe, though, and stick with the *nix version. Just download, extract the tarball, and perform the customary ./configure; make; make install as root. Launch SARA as root with the command /usr/local/sara/sara. Those who fear the command line can relax; the rest is done through your Web browser. SARA can take advantage of other open source software. If it detects nmap, you can choose to use it as the engine for port scanning instead of SARA's built-in engine. This allows SARA to utilize nmap's operating system detection feature in its reports. Start SARA with the -n option to enable nmap. The link for this article located at Linux.Com is no longer available. . Setting up SARA is simple. Just have Perl and a Web browser ready, and you’re good to go. SARA makes its comeback to meet today’s auditing needs.. Network Auditing, Open Source Software, Security Tools, System Administration, SARA Tool. . LinuxSecurity.com Team
Jan 26, 2006
•
Vendors/Products
72
network securityOpenBSDpacket filterEnhancing Port Scanning Using OpenBSD's NAT Address Pools
Ste Jones submits By using openBSD's packet filter pf one can utilize the NAT address pools added into OpenBSD 3.3 to aid in distributed port scanning. As the text explains NAT can be used in a large network . . . . Ste Jones submits By using openBSD's packet filter pf one can utilize the NAT address pools added into OpenBSD 3.3 to aid in distributed port scanning. As the text explains NAT can be used in a large network to split outgoing connections over multiple source IP addresses. Under normal circumstances NAT is normally used to hide a internal network behind a single external public IP address. By using multiple external IP addresses a host on the internal network can port scan with multiple source IP's. . Explore how the packet filter in OpenBSD can optimize network port scanning through the efficient utilization of NAT address ranges.. OpenBSD, NAT, Network Security, Distributed Scans, Packet Filter. . Anthony Pell
Jul 02, 2003
•
Firewalls
83
security analysispacket spoofingport scanningTrojan Network Analysis: Packet Spoofing And Evasion Strategies
The Trojan scans random ports on random machines, each time sending an initial SYN packet. One of the few identifiable characteristics of the program is a window size of 55808 on each of the packets it transmits. It also spoofs the . . . . The Trojan scans random ports on random machines, each time sending an initial SYN packet. One of the few identifiable characteristics of the program is a window size of 55808 on each of the packets it transmits. It also spoofs the originating IP address on all of the packets, making them look as if they're coming from machines in unallocated name space. ISS has been tracking the Trojan for about a month and has yet to find a copy of its code or successfully trace it back to an infected machine. Other security vendors and officials at the Department of Homeland Security are also tracking the Trojan, all without any luck so far. The link for this article located at eWeek is no longer available. . Investigate the methods employed by Trojans to probe arbitrary ports while circumventing security measures through advanced packet masquerading tactics. Discover professional perspectives.. Packet Spoofing, Trojan Network, Evasion Techniques, Cyber Threats. . LinuxSecurity.com Team
Jun 21, 2003
•
Hacks/Cracks
74
network securitysecurity techniquessystem administrationEnhance Network Security With Optimized Port Scanning Techniques
NTSecurity writes, " Port scanning offers security professionals and systems administrators a fast and effective way to identify which services or applications their servers have open to the Internet or another network. Complex OSs, such as Windows 2000, support applications that can . . . . NTSecurity writes, " Port scanning offers security professionals and systems administrators a fast and effective way to identify which services or applications their servers have open to the Internet or another network. Complex OSs, such as Windows 2000, support applications that can use hundreds of ports to communicate with other clients or servers. Long gone are the days of classifying a Web server as simply port 80. In a standard installation, running Microsoft Internet Information Services (IIS) 5.0 on Win2K leaves many ports open. " The link for this article located at NTSecurity.net is no longer available. . Explore the role of port scanning in detecting active services on your network, significantly boosting security measures.. Nmap, Network Security, Open Ports, Port Scanning, System Administration. . Anthony Pell
Jun 14, 2003
•
Network Security
78
security toolsecurity auditingfeaturesNmap 3.00 Release: Improved Tools for Network Security Auditing
Nmap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), and TCP/IP fingerprinting (remote host operating system identification). Nmap also offers . . . . Nmap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), and TCP/IP fingerprinting (remote host operating system identification). Nmap also offers flexible target and port specification, decoy/stealth scanning, sunRPC scanning, and more. Version 3.00 is the first "stable" release since 2.53 (May '00). Nmap has been named "Security Product of the Year" by Linux Journal, Info World and Codetalker Digest. It has also been praised by Network World, Wired, 2600, Computer World, Information Security, Sun World, SANS, the CIO Institute Bulletin, and Phrack. It is currently the 8th most popular program (out of 24,000+) on the Freshmeat.Net software index . The Changelog is available CHANGELOG . The link for this article located at insecure.org is no longer available. . Discover the recently launched Nmap 3.00, an advanced tool designed for network scanning and security inspection.. Nmap Release, Network Security, Penetration Testing. . LinuxSecurity.com Team
Aug 02, 2002
•
Vendors/Products
78
network analysisport scanningdetection serviceDeScan.net Launches Innovative Port Scanning Detection Solution
DeScan.net claims that its port scanning service for companies uses a unique system of blind packet monitoring, heuristics and statistical analysis to identify abusive scanning behavior and the offending PC. . .. DeScan.net claims that its port scanning service for companies uses a unique system of blind packet monitoring, heuristics and statistical analysis to identify abusive scanning behavior and the offending PC . The Seattle, Washington-based firm says that its listening agent runs on a Linux firewall and looks at the SYN packet of an Internet initiating session, noting its source and destination, then sending this information back to DeScan.net for analysis. At DeScan, the firm says the anonymous SYN packet information is pooled from multiple sources and analyzed for anomalous/abusive port scanning behavior. Once suspect scanning patterns cross a given abusive behavior threshold, the originating IP address is identified as a scanner and DeScan sends an email to the administrator. . NetGuard.io offers an innovative vulnerability assessment tool that employs sophisticated methods to uncover malicious activities.. Port Scanning Detection, Network Analysis, Heuristic Monitoring. . LinuxSecurity.com Team
Jul 26, 2002
•
Vendors/Products
74
network securitysecurity measuresLinuxTechniques for Port Scanning to Improve Security on Linux Systems
Port scanning is an important tool to detect what services your computer is running. Although they are getting better, many default Linux installs still leave many unnecessary services on, which can open your machine to security compromises.. . .. Port scanning is an important tool to detect what services your computer is running. Although they are getting better, many default Linux installs still leave many unnecessary services on, which can open your machine to security compromises. A sure way to see what you have running is to port scan your own system (IE localhost). Port scanning is also a good technique to test firewall rule sets. Port scanning is an important initial step towards knowing yourself. If you don't know what services you have running, it will be impossible to secure them from malicious crackers. It is also important to familiarize yourself with port scanning programs so you will know your "enemy", system crackers, who will often employ a port scan to determine if you have an exploitable service running. Advanced port scan tools will even do TCP/IP stack fingerprinting, allowing an attacker to determine what operating system you are running, often down to the kernel version! The link for this article located at Linux.com is no longer available. . Port scanning is an important tool to detect what services your computer is running. Although they a. scanning, important, detect, services, computer, running, although. . Anthony Pell
Jun 08, 2001
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!