Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 10 articles for you...
78
security advisoryweb browserFirefoxFirefox Security Innovation: New Sandboxing For Linux And Mac Users
Along with rolling out thelatest security updateto the Firefox browser, Mozilla has now introduced a new approach to secure the Firefox web browser on Linux and Mac operating systems. . Firefox uses various external libraries to render the audio, videos, and images that can be exploited by the attackers to introduce malicious code. Hence, Firefox includes a new lightweight sandboxing architecture, RLBox, that uses a WebAssembly sandbox to tackle the vulnerabilities posed by the third-party libraries. The link for this article located at Fossbytes is no longer available. . Mozilla introduces upgraded security measures in Firefox for Windows and Ubuntu, strengthening protection against external risks.. Firefox Security, Linux Browser Protection, WebAssembly Sandbox, Third-Party Library Security. . LinuxSecurity.com Team
Feb 28, 2020
•
Vendors/Products
79
security techniquesmalware defenseattack mitigationInnovative Sandboxing Techniques Strengthen Malware Defense Strategies
Hackers are finding ways to bypass sandboxes and sneak in their malware, so some vendors are creating new approaches to counter them. Attackers continue to find ways to evade traditional sandboxes, and some vendors are looking to raise the bar with new approaches to isolating and vetting files.. Sandboxing adds an extra layer of protection, diverting untrusted files or programs from unverified third parties, suppliers, or websites into a separate, secure environment where they can be inspected for malicious code. Based on that inspection, the attachments, files or applications are either allowed to enter or rejected from moving further into the network. The link for this article located at Dark Reading is no longer available. . Sandboxing adds an extra layer of protection, diverting untrusted files or programs from unverified . hackers, finding, bypass, sandboxes, sneak, their, malware, vendors, creatin. . LinuxSecurity.com Team
Sep 07, 2015
•
Security Projects
76
security advisorysecurity issueexploitChrome OS: Security Issues Patched Post Pwnium Exploits and Pwn2Own
At Google's Pwnium hacking competition, two new security exploits in Chrome OS were demonstrated, while at Pwn2Own a Chrome Web browser problem was found that also impacted Chrome OS. All three problems have now been patched.. Linux is very secure. Google's Linux-based Chrome OS, with its auto-updating and security sandboxing, is even more secure. But, neither is perfect. At Google's own Pwnium hacking contest and HP Zero Day Initiative's (ZDI) annual Pwn2Own hacking contest, three new sets of security problems were found in Chrome OS... and then immediately patched. The link for this article located at ZDNet Blogs is no longer available. . Uncover critical vulnerabilities in Chrome OS exposed at the latest cybersecurity events, promptly addressed for enhanced user protection.. Chrome OS Security, Exploits, Security Patching, Hacking Techniques. . Dave Wreski
Mar 18, 2014
•
Organizations/Events
77
cyber threatdefense strategiescyber espionageSandboxing Against Flame: Understanding Cyber Threat Mitigation Strategies
Bigger lesson learned from Flame: Multiple layers of security needed, so when one technology fails, a second or third may succeed. At least one vendor is making the argument that sandboxing technology would have protected computer systems against Flame, but some experts are not convinced it would have caught the highly sophisticated malware package believed to be built for cyber espionage. The link for this article located at InfoWorld is no longer available. . Investigating whether isolation techniques could thwart Specter breaches emphasizes the importance of diverse protective measures and approaches.. Flame Attack, Sandboxing Technology, Cybersecurity Strategies. . LinuxSecurity.com Team
Jun 11, 2012
•
Server Security
78
browser securitysecurity featuressandboxingChrome's Strong Security Aspects According to Accuvant Study
Which is the most secure browser around? According to a newly released study by Accuvant, that. The Google-commisioned research emphasizes on several key points that would make up a secure browser, namely the integration of sandboxing, plug-in security, JIT hardening, ASLR, DEP, GS and URL blacklisting. The link for this article located at ZDNet Blogs is no longer available. . Explore critical insights from a recent Accuvant analysis highlighting Chrome's leading security attributes that bolster web safety and safeguard user data.. Chrome Security, Secure Browser, Browser Protection, Accuvant Research. . LinuxSecurity.com Team
Dec 13, 2011
•
Vendors/Products
78
security advisoryexploitkernelApple OS X Sandboxing: Security Risk and Application Impact
Researchers claim to have discovered a vulnerability with the sandbox security mechanism used by Apple. The sandbox, which is baked into the kernel of Mac OS X, is designed to apply application restrictions, so that code that has no reason to access a network isn't able to access a corporate LAN or the internet, for example. . The restriction means that even if the code contains bugs, hackers will be stuck if they try to exploit the vulnerability to do anything else. All applications published through the App Store "must implement sandboxing" by the start of March 2012. The link for this article located at The Register UK is no longer available. . Scientists discover a flaw within Apple's isolation mechanisms, highlighting possible dangers in app limitations.. Apple Security, Sandboxing Issues, Application Exploit Risk. . LinuxSecurity.com Team
Nov 15, 2011
•
Vendors/Products
67
security updateOpenSSHprivilege separationOpenSSH 5.9: SHA256 HMAC, Sandboxing, And Security Enhancements
The OpenSSH development team has announced the release of version 5.9 of its open source SSH (Secure Shell) implementation. Compared to the OpenSSH 5.8 release from 7 months ago, which was primarily a security update, the latest update includes a wider variety of changes including the addition of new SHA256-based HMAC (Hash-based Message Authentication Code) transport integrity modes.. To prevent a compromised privsep (privilege separation) child from being used to attack other hosts, sandboxing has been introduced through an optional mode that enables mandatory restrictions on the system calls (syscalls) which the privsep child can perform. The developers note that the sandboxing of the privsep child process is "currently experimental but should become the default in a future release". The link for this article located at H Security is no longer available. . In OpenSSH 5.9, mitigating risks from a compromised privsep child is essential; using SHA256 checksums and enhanced sandboxing significantly improves security. OpenSSH, SHA256, Secure Shell, sandboxing, privilege separation. . LinuxSecurity.com Team
Sep 06, 2011
•
Cryptography
79
malicious activitysoftware exploitdefense strategySandboxing Techniques To Mitigate Software Attacks And Exploits
Exploitation of just ONE software vulnerability is typically all that separates the bad guys from compromising an entire machine. The more complicated the code, the larger the attack surface, and the popularity of the product increases the likelihood of that outcome. Operating systems, document readers, Web browsers and their plug-ins are on today. Visit a single infected Web page, open a malicious PDF or Word document, and bang The link for this article located at ZDNet Blogs is no longer available. . Visit a single infected Web page, open a malicious PDF or Word document, and bang The link for this . exploitation, software, vulnerability, typically, separates. . LinuxSecurity.com Team
Dec 22, 2010
•
Security Projects
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!