Network Security
open-source python
open-source python Researchers recently identified another wave of malicious packages on PyPI linked to the broader Mini Shai-Hulud campaign, a worm-like supply chain attack that spread through trusted software packages. On the surface, the packages looked no different from thousands of others published to the repository each week. . Instead of trying to break into a target network directly, the attackers hid malicious code inside software that developers were already using. A few downloads are all it takes....
Jun 09, 2026
Security Vulnerabilities malware linux
malware linux IronWorm steals credentials and uses them to spread beyond the original victim, turning developer access into a supply chain risk. . A new campaign targeting npm has evolved past simple credential theft. Researchers identified IronWorm, a self-spreading threat. It harvests high-value Linux development secrets—SSH keys, cloud tokens, package publishing credentials. One compromised workstation becomes a launchpad for downstream supply chain attacks. This is not a get-in-and-get-out operation....
Jun 08, 2026
Network Securitysystem security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found -4 articles for you...
82
technology initiativeinventory managementpassive rfidDepartment of Defense Requires Passive RFID Tags for Suppliers
The Department of Defense issued a mandate early this month requiring all of its suppliers to use passive RFID tags on the cases and pallets they deliver to its various branches by January 2005. The Defense Department isn't the first to require that suppliers support RFID--Wal-Mart Stores Inc. has told its top 100 suppliers to use RFID tags on cases and pallets by the same date and will require all its suppliers to use the technology in 2006.. . .. The Department of Defense issued a mandate early this month requiring all of its suppliers to use passive RFID tags on the cases and pallets they deliver to its various branches by January 2005. The Defense Department isn't the first to require that suppliers support RFID--Wal-Mart Stores Inc. has told its top 100 suppliers to use RFID tags on cases and pallets by the same date and will require all its suppliers to use the technology in 2006. RFID is expected to improve inventory management with less manpower. Today, Defense agencies check inventory manually with bar-code scanners, says Alan Estevez, assistant deputy undersecretary of defense for supply-chain integration. "Anytime you have intervention, there's some margin of error. With passive RFID, you now have the ability to in-check without manual intervention." The Defense Department's directive could have huge ramifications for the technology, which until recently has been too costly to use on a wide scale. The initiative will affect tens of thousands of suppliers, more than Wal-Mart's initiative, which ultimately will involve more than 10,000 suppliers. The Defense Logistics Agency, the department's largest agency, has nearly 24,000 providers. "This is as good or better than the Wal-Mart mandate in terms of driving adoption of RFID," says Noha Tohamy, a Forrester Research senior analyst. The Defense Department "is a global enterprise," she adds. "They stay away from proprietary deployments." The link for this article located at SecurityPipeline is no longer available. . The National SecurityAgency's guidelines stipulate that contractors implement active RFID systems, improving asset tracking capabilities.. Passive Rfid, Defense Suppliers, Supply Chain Efficiency, Rfid Strategy. . Anthony Pell
Oct 13, 2003
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Discover faster search, smarter navigation, and deeper Linux security insights. Read More