Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 23 articles for you...
67
public key infrastructureopen source toolpki managementManaging Public Key Infrastructures Efficiently With CSRTool
If you've worked with Public Key Infrastructures (PKI) at all, you'll probably know at least one thing: PKIs are complex! Aside from the fact that there are so many details to remember, there is also the added burden that most tools for working with PKIs are command-line interface (CLI) tools. Well, in one small way, StrongAuth, Inc. has changed that. . The link for this article located at StrongAuth is no longer available. . Uncover the intricacies of Public Key Infrastructures and explore how CSRTool streamlines PKI administration.. PKI Management, CSRTool, Command Line Tool, Open Source Tools, Security Management. . LinuxSecurity.com Team
Jan 23, 2007
•
Cryptography
67
security standardscryptographypublic key infrastructureExploring HSPD-12 Influence on Public Key Infrastructure Standards
In 1995, when Tim Polk began working full time on developing standards and guidance for using public-key infrastructure applications, he figured it would be a two- or three-year project. But 11 years later, Polk, the National Institute of Standards and Technology. The link for this article located at Government Computer News is no longer available. . Explore the importance of HSPD-12 in strengthening the frameworks for public key infrastructure protocols.. Public Key Infrastructure, Digital Identity, Cryptography Standards. . LinuxSecurity.com Team
Nov 27, 2006
•
Cryptography
67
encryptionGnuPGdigital securityUnderstanding Keysigning and GnuPG's Power in Encryption
The use of strong public encryption has always been popular among geeks. Perhaps the most commonly used and most beloved encryption for e-mail is Pretty Good Privacy (PGP); started as a free method for protecting emails or other sensitive information, later turned into a cornerstone for a large company. As PGP became more corporate, costly and used patented algorithms, another project, GnuPG, sprung up to continue to offer strong encryption to the masses. . One foundation of reliable encryption is trust. The use of encryption between two or more people relies on you being sure that the message you sent is properly encrypted to and able to be decrypted solely by the intended recipient. When using a friend's GPG key, you must be sure that the key was created by and belongs solely to your friend. Otherwise, you may send mail that your friend cannot read (if they don't have the key you encrypted to), or worse, mail that some other party can read (if that party does have the key you encrypted to). . One foundation of reliable encryption is trust. The use of encryption between two or more people rel. strong, public, encryption, always, popular, among, geeks, perhaps, commonly. . LinuxSecurity.com Team
May 24, 2006
•
Cryptography
67
data securityencryptionuser authenticationImplementing Effective Public Key Infrastructure for User Authentication
Nobody ever said implementing a public-key infrastructure would be easy, but a pair of experts at the 2006 International Conference on Network Security said last week that using PKI is often harder than it needs to be. “We haven’t been as successful as I wish we had been,. PKI promises to be a pretty good way to authenticate users, sign documents electronically and secure data. It uses a pair of mathematically related encryption keys to secure data. One key is kept private while the other is made public, allowing communications between individuals without exchanging secret keys. Using a public key, messages can be sent that can only be read by someone possessing the corresponding private key. The link for this article located at Government Computer News is no longer available. . Public Key Infrastructure (PKI) provides a powerful solution for verifying user identities, signing electronic documents, and ensuring secure communication data.. Public Key Infrastructure, User Authentication,Encryption Keys. . LinuxSecurity.com Team
Apr 26, 2006
•
Cryptography
74
cryptographyinternet securitykey exchangeExploring The Impact Of Diffie-Hellman On Internet Transactions Security
In the 1970s, Martin Hellman and Whitfield Diffie wrote the recipe for one of today's most widely used security algorithms in a paper called "New Directions in Cryptography. The paper mapped out the Diffie-Hellman key exchange, a major advancement in Public Key Infrastructure (PKI) technology that allows for secure online transactions and is used in such popular protocols as the Secure Sockets Layer (SSL) and Secure Shell (SSH). In 2000, they received the prestigious Marconi Foundation award for their contributions. . With the world increasingly dependent on the Internet for commerce and a financially-motivated underground of malcode writers working overtime to exploit its weaknesses, there's been plenty of debate over how cryptography must evolve to meet new threats. In this two-part feature, Diffie and Hellman discuss the threats that concern them most and where they think the technology they helped advance is headed. The link for this article located at TechTarget.com is no longer available. . With the world increasingly dependent on the Internet for commerce and a financially-motivated under. 1970s, martin, hellman, whitfield, diffie, wrote, recipe, today's, widely. . Benjamin D. Thomas
Apr 13, 2005
•
Network Security
74
OpenSSLenterprise securitytrust managementImplementing Your Own CA For Improved Enterprise PKI Security
In this article we continue our discussion of some of the foundations of public key infrastructure (PKI) that we began in an earlier article, where we discussed the role of keys, certificates, and trust. While discussing the importance of distributed (or transitive) trust in PKI design, we outlined the job of the certificate authority (CA) in PKI, giving the general idea of its role in certificate issuance and management. Here, we'll explore the how and when one might wish to establish one's own CA when incorporating a PKI into an enterprise design. . . .. In this article we continue our discussion of some of the foundations of public key infrastructure (PKI) that we began in an earlier article, where we discussed the role of keys, certificates, and trust. While discussing the importance of distributed (or transitive) trust in PKI design, we outlined the job of the certificate authority (CA) in PKI, giving the general idea of its role in certificate issuance and management. Here, we'll explore the how and when one might wish to establish one's own CA when incorporating a PKI into an enterprise design. We'll expand the discussion of CA implementation and use by giving practical examples using two widely available tools, OpenSSL and keytool. Bear in mind that many of the topics that we'll touch on require a deeper background than is practical to present within the scope if this article. Where applicable, we'll provide pointers to useful references. Why do I need a CA? As discussed in our earlier article, the CA is a crucial component of any PKI, as it provides public-key certificate issuance, management, and revocation services to PKI users, thus enabling distributed trust relationships. In general, the CA is usually not a singular entity, but a hierarchical collection of authorities, with a root CA at the top of the structure acting as the most trusted (and most authoritative) entity in the organization. The link for this article located at newsforge.com is no longer available. . In this article wecontinue our discussion of some of the foundations of public key infrastructure (. article, continue, discussion, foundations, public, infrastructure. . Anthony Pell
Aug 25, 2004
•
Network Security
74
IT securitygovernmentsecurity challengesGAO Report on $1 Billion PKI Investment Highlights Key Challenges
The federal government has spent about $1 billion on 89 public key infrastructure programs among 20 major agencies in recent years, but the results of those programs are mixed, according to a report issued by the General Accounting Office. PKI is a secure method for exchanging information within an organization, within an industry, nationwide, or worldwide. . . .. The federal government has spent about $1 billion on 89 public key infrastructure programs among 20 major agencies in recent years, but the results of those programs are mixed, according to a report issued by the General Accounting Office. PKI is a secure method for exchanging information within an organization, within an industry, nationwide, or worldwide. Implementing PKI poses a major challenge for agencies, Linda Koontz, GAO's director of information management issues, wrote in a letter to Reps. Tom Davis and Adam Putnam, who chair House panels with oversight on governmental IT use. The letter was dated Dec. 15, but released Thursday. GAO, the investigative arm of Congress, identified four major challenges: The link for this article located at InformationWeek is no longer available. . The federal government has spent about $1 billion on 89 public key infrastructure programs among 20 . federal, government, spent, about, billion, public, infrastructure, programs, among. . Anthony Pell
Jan 16, 2004
•
Network Security
67
security measuresauthenticationcryptographyThe Importance Of Public Key Infrastructure In Secure Document Transactions
Your company is negotiating a big deal with a partner, making you a bit nervous about the security of exchanging documents via email. There is a non-disclosure agreement in place, but you'd like to be absolutely certain that only the recipients . . . . Your company is negotiating a big deal with a partner, making you a bit nervous about the security of exchanging documents via email. There is a non-disclosure agreement in place, but you'd like to be absolutely certain that only the recipients can see the plans for your company's new product initiative. When the partner emails their agreement to the final version of the proposed deal, you also want to be able to prove absolutely that the email really is from them. Is there a proven technology that can fulfill both needs? Public Key Infrastructure (PKI) can handle these requirements and more. You may already be using PKI without knowing it if you have relied on certificates or "certs" to identify a web server or to confirm the identity of external websites. It is a critical technology for the Internet and is used in applications as diverse as e-commerce and VPNs. Let's explore the world of PKI cryptography to learn about keys, signatures, and certificates, and to see how PKI can benefit you and protect your company's valuable digital assets. You don't need to be an expert in encryption to deploy PKI in your operation, but there are a few key concepts and components to understand. PKI is a powerful technology that employs cryptography to provide two important capabilities, privacy and authentication. The cryptographic procedures, or algorithms, use two keys to encrypt information. This is called asymmetric cryptography. Compared with conventional (symmetric) cryptography, which uses only one key, it is easier to distribute keys, making PKI much simpler and more practical to deploy. The link for this article located at LinuxPlanet is no longer available. . Public Key Infrastructure (PKI) plays a vital role in secure document exchange and safeguarding digitalassets in negotiations by ensuring confidentiality, integrity, and authentication.. Public Key Infrastructure, Secure Document Exchange, Cryptography Solutions, Digital Asset Protection. . LinuxSecurity.com Team
Jun 24, 2003
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!