Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found -1 articles for you...
83
security issueencryptionrubyRuby Crypto Vulnerability Exposes Risks in RSA Key Encryption Methods
The Ruby developers had a near miss with a crypto disaster when an "awful bug" crept into the language's source code development tree. A simple programming error made the library generate RSA keys that caused the encryption mechanism to produce clear text. . Luckily, the error was caught before it made it to any release version of Ruby, but it provides a good example of how a simple error can have potentially far-reaching effects. The RSA asymmetric encryption technique differentiates between secret and public keys. The public key consist of a modulus n and an exponent e. The plain text, m, is encrypted according to the mathematical formula The link for this article located at H Security is no longer available. . An incident during the advancement of Python highlights significant dangers presented by blockchain flaws that may result in decryption errors.. Ruby Security Breach, RSA Encryption Issues, Crypto Development Risks. . LinuxSecurity.com Team
Nov 09, 2011
•
Hacks/Cracks
67
security advisorythreat analysistiming attackEnhancing RSA Cryptography: New Threat from Branch Prediction Exploits
"Branch Prediction Analysis is a recent attack vector against RSA public-key cryptography on personal computers that relies on timing measurements to get information on the bits in the private key. However, the method is not very practical because it requires many attempts to obtain meaningful information, and the current OpenSSL implementation now includes protections against those attacks. However, German cryptographer Jean-Pierre Seifert has announced a new method called Simple Branch Prediction Analysis that is at the same time much more efficient that the previous ones, only needs a single attempt, successfully bypasses the OpenSSL protections, and should prove harder to avoid without a very large execution penalty." . The link for this article located at Slashdot.org is no longer available. . The link for this article located at Slashdot.org is no longer available.. 'branch, prediction, analysis, recent, attack, vector, against, public-key, cryptography, persona. . LinuxSecurity.com Team
Nov 20, 2006
•
Cryptography
67
data protectionencryptionopensslExploring RSA Encryption in OpenSSL for Secure Financial Transactions
When sending your credit card number through a public medium, such as the Internet, your financial credibility may be compromised if the number is not first encrypted. It is impossible to tell who may be listening in on your connection as you shop for new CDs or books. The RSA encryption method often is used to hide your credit card number from would-be thiefs on the Internet, because it uses a public key to hide your information and a private key to reveal it.. . .. When sending your credit card number through a public medium, such as the Internet, your financial credibility may be compromised if the number is not first encrypted. It is impossible to tell who may be listening in on your connection as you shop for new CDs or books. The RSA encryption method often is used to hide your credit card number from would-be thiefs on the Internet, because it uses a public key to hide your information and a private key to reveal it. This article banishes the mystery surrounding RSA encryption and explains how a realistic implementation of RSA works in the OpenSSL library. The only files you need to concern yourself with appear in the openssl/crypto/bn and openssl/crypto/rsa subdirectories. Feel free to download and take a look at the code to get a feel for it before continuing. Symmetric vs. Asymmetric Encryption The best way to understand asymmetric encryption is to think of a box that has two kinds of keys: one key locks it and the other unlocks it. Anybody who has a copy of the locking key (aka public key) can put a secret in the box. Because only you have the unlocking key (aka private key), nobody else can reveal a secret that someone else locked in the box. This is different from symmetric key encryption, in which the same key is used for locking and unlocking. The link for this article located at Linux Journal is no longer available. . When sending your credit card number through a public medium, such as the Internet, your financial c. sending, credit, number, through, public, medium, internet,financial. . LinuxSecurity.com Team
Sep 25, 2003
•
Cryptography
67
web securitykey managementcryptographyExploring SSL Security Threats: Short RSA Key Flaws Affecting Websites
Millions of users of the World Wide Web rely on a single cryptographic protocol, SSL, to make secure connections to remote web servers. The flexibility and ease of use of SSL, which is built into browser and server software, gives them . . . . Millions of users of the World Wide Web rely on a single cryptographic protocol, SSL, to make secure connections to remote web servers. The flexibility and ease of use of SSL, which is built into browser and server software, gives them confidence in the security of their data. SSL is widely used and trusted, even by web users who are not aware of the details of how it works to secure their data. Despite this confidence, the flexibility of SSL potentially leaves companies and their customers at risk. The SSL protocol does not mandate minimum key lengths to be used during the critical initial key exchange that begins each secure session. All too many servers still use insufficiently secure long-term keys. While nearly all modern web browsers use sufficient security for the bulk of the data communication in each session, SSL allows for a variety of key lengths to be used in the key exchange process and it is this which creates risk. The link for this article located at nCipher is no longer available. . Millions of users of the World Wide Web rely on a single cryptographic protocol, SSL, to make secure. millions, users, world, single, cryptographic, protocol, secure. . LinuxSecurity.com Team
Apr 12, 2002
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!