Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
78
data protectiondisk encryptionremovable mediaMaximizing Disk Protection With BitLocker and TPM Security
BitLocker uses the AES encryption algorithm in cyber-block chaining (CBC) mode with a 128-bit key, combined with the Elephant diffuser for additional disk-encryption-specific security not provided by AES. . The application works by encrypting a disk partition; that partition can be located on the system or on a removable device. If you are using BitLocker to secure your system's hard drive, for example, it will create a system partition (which contains the files needed to start your computer) and an operating system partition, which contains your applications, data and Windows. The operating system partition will be encrypted and the system partition will remain unencrypted so your computer can start. BitLocker reaches its full potential on computers equipped with TPM. BitLocker can use either transparent operation mode (where the TPM automates key entry) or a user authentication mode (where the user must manually input a password). The TPM hardware detects any unauthorized changes to the pre-boot environment, including to the BIOS and master boot record (MBR). If any unauthorised changes are detected, BitLocker requests a recovery key on a USB device or a recovery password entered by hand. Either of these cryptographic secrets will decrypt the Volume Master Key (VMK) and allow the bootup process to continue. BitLocker offers additional protection in the form of BitLocker To Go, an encryption option that can be used with removable media. The link for this article located at Tech World is no longer available. . Drive encryption is implemented by BitLocker utilizing AES with CBC mode, while also enhancing protection via Trusted Platform Module (TPM) technology.. BitLocker Encryption,AES Disk Security,TPM Integration,Encryption Algorithms,Disk Protection. . LinuxSecurity.com Team
Feb 10, 2010
•
Vendors/Products
83
data protectionIT managementcorporate securityAddressing iPod Security Risks In Corporate Environments
The recent buzz about security threats posed by iPods to corporations has reinforced the need for IT managers to treat these devices like any other removable media that employees with malicious intent can use to extract sensitive data. Following the suggestion recently made by a security company that iPods be banned from the workplace until proper protection is in place, and the emergence of a proof-of-concept iPod virus, it would seem that iPods pose a particularly high risk to corporations that let employees wander into work with these devices strung to their ears. Those same devices that entertain workers during their commute can be used to copy personal or financial data, intellectual property and other sensitive information from corporate PCs, often without a trace. The idea of stealing corporate data with an iPod has gained so much attention lately that it. The link for this article located at Network World is no longer available. . Smartphones can create vulnerabilities in business data safety, underscoring the importance of implementing safeguards against gadget risks.. iPod Security Threats,Cybersecurity Strategies,Corporate Data Protection. . LinuxSecurity.com Team
Apr 10, 2007
•
Hacks/Cracks
83
malwarethreat detectionattack preventionAnalyzing Modern Malware Attacks on USB Devices and Security Impacts
Researchers at the Internet Storm Center say at least a few hackers have gone old school. Kevin Liston, a handler at the Internet Storm Center, wrote in an online diary Friday that there are a handful of viruses roaming around the Internet targeting USB removable media -- think thumb drives and other storage devices. Win32.Agent.WJ and VBS.Solow.E are just two of them. . "This harkens back to the old days of floppy-disk boot-sector viruses," he writes. Johannes Ullrich, chief research officer at the SANS Institute and chief technology officer for the Internet Storm Center, says the viruses are somewhat common malware but their gimmick is that they are focused on rather unsuspecting targets. If a user's computer is infected with one of them, the malware automatically will look for a device plugged into the USB port. If there's a thumb drive there, for example, it will download itself onto it and wait for the user to click on it and start the active infection. The link for this article located at Yahoo! News is no longer available. . 'This harkens back to the old days of floppy-disk boot-sector viruses,' he writes. Johannes Ullrich,. researchers, internet, storm, center, least, hackers, school, kevin. . LinuxSecurity.com Team
Mar 05, 2007
•
Hacks/Cracks
83
data breachcyber threatsecurity riskUSB Malware Threats: Old School Techniques Pose New Risks
Researchers at the Internet Storm Center say at least a few hackers have gone old school. Kevin Liston, a handler at the Internet Storm Center, wrote in an online diary Friday that there are a handful of viruses roaming around the Internet targeting USB removable media think thumb drives and other storage devices. Win32.Agent.WJ and VBS.Solow.E are just two of them. . "This harkens back to the old days of floppy-disk boot-sector viruses," he writes. Johannes Ullrich, chief research officer at the SANS Institute and chief technology officer for the Internet Storm Center, says the viruses are somewhat common malware but their gimmick is that they are focused on rather unsuspecting targets. If a user's computer is infected with one of them, the malware automatically will look for a device plugged into the USB port. If there's a thumb drive there, for example, it will download itself onto it and wait for the user to click on it and start the active infection. The link for this article located at DarkReading is no longer available. . 'This harkens back to the old days of floppy-disk boot-sector viruses,' he writes. Johannes Ullrich,. researchers, internet, storm, center, least, hackers, school, kevin. . LinuxSecurity.com Team
Mar 02, 2007
•
Hacks/Cracks
82
security advisorydata protectionencryptionEnergy Department Halts Operations: Media Protection Issues Identified
LS: Would it be inappropriate to look at this as a perfect example of the dangers inherent in the lack of risk-based security analysis? If Sandy Berger visited the DoE, they'd probably have to shut down for a year. This overreaction (hard disks with classified info cannot be used?) is an invitation to DoS the DoE by simply 'misplacing' something. It is also dangerous: a positive incentive for employees to not report theft of classified information. Simply put, if the data is that valuble, it should be encrypted and impossible to read without passing some strong authentication, including some sort of challenge-response. If it -is- that encrypted, the thief might as well format the Zip disks and use them for data storage for all the good it would do. This response demonstrates eloquently that the DoE's take on data security is, at best, reactive. . . .. Energy Secretary Spencer Abraham ordered today all Energy Department operations to halt using controlled removable electronic media (CREM) to improve media protection procedures. Abraham's directive follows an announcement earlier this month that Los Alamos National Laboratory employees had lost two Zip discs containing classified material. Lab workers are searching for the discs amid more than 2,000 safes and vaults. The lab's director has halted all operations at Los Alamos, and Abraham has directed that classified operations will not resume until Energy's deputy secretary, Kyle McSlarrow, and the National Nuclear Security Administration's administrator, Linton Brooks, confirm that newly implemented corrective actions improve CREM management. "While we have no evidence that the problems currently being investigated are present elsewhere, we have a responsibility to take all necessary action to prevent such problems from occurring at all," Abraham said in a statement. CREM includes all types of classified hard drives or computer discs. The link for this article located at fcw.com is no longer available. . Energy Secretary Spencer Abraham orderedtoday all Energy Department operations to halt using contro. would, inappropriate, perfect, example, dangers, inherent. . Anthony Pell
Jul 27, 2004
•
Government
67
data securitydata protectionencryption standardIBM Proposes Data Security Standard For Removable Media Enhancement
IBM is backing a standards proposal that would allow generic functions to be programmed into removable media such as DVDs, flash memory and Zip drives that, among other things, could limit what a user copies to or from his computer. IBM . . . . IBM is backing a standards proposal that would allow generic functions to be programmed into removable media such as DVDs, flash memory and Zip drives that, among other things, could limit what a user copies to or from his computer. IBM had previously proposed the controversial Copy Protection for Recordable Media (CPRM) standard to the T13 committee of the Washington-based National Committee for Information Technology Standards, which oversees Advanced Technology Attachment (ATA) interfaces. Such interfaces are used by a computer's motherboard to communicate with its disk storage devices. But IBM said it pulled its backing of CPRM in favor of a "generic functionality" proposal submitted by Curtis Stevens, a technical editor at Phoenix Technologies Ltd. in San Jose, at the T13 group's meeting late last month. The link for this article located at ComputerWorld is no longer available. . IBM is backing a standards proposal that would allow generic functions to be programmed into removab. backing, standards, proposal, would, allow, generic, functions, programmed, removab. . LinuxSecurity.com Team
Mar 20, 2001
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!