Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 14 articles for you...
79
secure accesspasswordless authenticationsoftware supply chainOpenPubkey Enhances Docker Signing With Zero-Trust Authentication
The newest open-source project hosted by the Linux Foundation is OpenPubkey, which is a collaboration with Docker and BastionZero and will be available for Docker container signing with zero-trust passwordless authentication. . OpenPubkey is born out of BastionZero's secure infrastructure access product and comes down to being a protocol to securely and accurately bind cryptographic keys to users and workloads by creating a CA out of an OpenID Connect Identity Provider. The hope is OpenPubkey can help secure the software supply chain for Docker and other software projects. The link for this article located at Phoronix is no longer available. . SecureSign enhances Kubernetes pod verification with seamless authentication and strives to bolster the application delivery pipeline.. OpenPubkey Project, Docker Signing, Zero-Trust Authentication, Software Supply Chain, BastionZero Collaboration. . LinuxSecurity.com Team
Oct 04, 2023
•
Security Projects
79
security solutionssecure accessuser identificationExploring Hardware-Based Authentication For Enhanced Security
Here are some thoughts about providing users and businesses ways for a website to authenticate a user all the way to the hardware connection to his computer or mobile device. . There are many cases where software methods are sufficient, of course, but higher grades of security might be required by certain applications. More standard software stacks are needed to link the hardware authenticators to the users The link for this article located at Dark Reading is no longer available. . There are many cases where software methods are sufficient, of course, but higher grades of security. thoughts, about, users, businesses, website, authenticate. . LinuxSecurity.com Team
Oct 27, 2011
•
Security Projects
77
key managementsecure accesslinux configurationConfigure Key-Based SSH Authentication In Linux Using PuTTY
This tutorial explains how you can replace password-based SSH authentication with key-based authentication which is more secure because only the people that own the key can log in. In this example, we're using PuTTY as our SSH client on a Windows system. . The link for this article located at HowToForge is no longer available. . The link for this article located at HowToForge is no longer available.. tutorial, explains, replace, password-based, authentication, key-based, authenti. . LinuxSecurity.com Team
Jul 06, 2009
•
Server Security
74
authenticationsystem administrationremote managementOpenSSH Secure Remote Management Setup Using Key Authentication
SSH is the secure replacement for rlogin, rsh and telnet, which has been used in the past to do remote administration work. Even today some people still like using telnet for administration, even though it actively affects system security, since all commands and passwords are transmitted in cleartext. Since we are aware of the security risk of running a telnet service and want to be better we are not only using SSH, we will set up SSH with public key authentification. . The link for this article located at DebianSec.com is no longer available. . The link for this article located at DebianSec.com is no longer available.. secure, replacement, rlogin, telnet, which. . Benjamin D. Thomas
Aug 18, 2006
•
Network Security
74
remote accesssecure accessvirtual private networkBenefits Of VPN Technologies For Enhanced Remote Security
Virtual Private Networks, or VPNs, extend the reach of local-area networks without requiring owned or leased private lines. Businesses can use VPNs to give remote and mobile users network access, connect geographically separated branches into a unified network and enable the remote use of applications that rely on internal servers. VPNs can use one or both of two mechanisms. One is to use private circuits leased from a trusted communications provider: alone, this is called a trusted VPN. The other is to send encrypted traffic over the public Internet: alone, this is called a secure VPN. Using a secure VPN over a trusted VPN is called a hybrid VPN. Combining two kinds of secure VPN into one gateway, for instance IPsec and SSL, is also called a hybrid VPN. . The link for this article located at ComputerWorld is no longer available. . Uncover key aspects of VPN solutions to enhance your privacy and elevate your internet connectivity.. VPN Technologies, Secure Access, Remote Networking, Secure Connectivity. . Benjamin D. Thomas
Aug 09, 2006
•
Network Security
74
cyber threatssecurity riskssecure accessUnderstanding User Authentication Risks in Cyber Security
Still using that tired and worn out password to log onto your PC? Is your mother’s maiden name still the main prompt you use to log on and check your credit card statement? Worried that the PIN number you use to access your online banking is the same PIN you’ve given the children to access the Sky Digibox? You should be. The fact is that as individuals, we are not doing enough to guarantee user authentication. And if you think that’s bad, the situation in organisations is even worse. . The link for this article located at Net-Security.org is no longer available. . The link for this article located at Net-Security.org is no longer available.. still, using, tired, password, mother’s, maiden. . Anthony Pell
Mar 20, 2006
•
Network Security
77
secure accessuser isolationchrooted sshDebian Sarge OpenSSH: Chrooted User Access Configuration
This tutorial describes how to install and configure OpenSSH so that it will allow chrooted sessions for users. With this setup, you can give your users shell access without having to fear that they can see your whole system. Your users will be jailed in a specific directory which they will not be able to break out of. . This setup is based on a Debian Sarge (Debian 3.1) system, and the chrooted SSH will be installed in such a way that it will still use the configuration files of the standard OpenSSH Debian package which are in /etc/ssh/, and you will be able to use the standard OpenSSH Debian init script /etc/init.d/ssh. Therefore you do not have to create your own init script and configuration file. The link for this article located at HowtoForge is no longer available. . This setup is based on a Debian Sarge (Debian 3.1) system, and the chrooted SSH will be installed in. tutorial, describes, install, configure, openssh, allow, chrooted, sessions. . LinuxSecurity.com Team
Jan 25, 2006
•
Server Security
77
remote managementfile systemFUSEEnhance Safe Remote File Access by Utilizing SSHFS Technology
It's a dangerous Internet out there, kids. If you are going to work on remotely connected machines, do it safely. Simple file transfers and interactive sessions have scp and ssh respectively; in fact there is hardly a commercial Web hosting provider left that doesn't support them. For more complicated scenarios we have VPN tools. But what if you need to work with files on a remote server, but find scp tedious in repetition and FreeS/WAN too cumbersome? You might find just what you're looking for in sshfs -- a tool for mounting a remote filesystem transparently and securely as if it were just another directory on your local machine. . sshfs is primarily the work of Miklos Szeredi, a Linux hacker from Budapest who is better-known as the creator of FUSE, the Filesystem in USErspace framework that makes sshfs possible. Szeredi was already working on FUSE when he discovered Florin Malita's similar project named LUFS and its SSHFS filesystem. The link for this article located at Linux.com is no longer available. . sshfs is primarily the work of Miklos Szeredi, a Linux hacker from Budapest who is better-known as t. dangerous, internet, there, going, remotely, connected, machines. . LinuxSecurity.com Team
Nov 22, 2005
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!