Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Organizations should combine the NVD and CISA KEV catalog to prioritize vulnerabilities effectively, focusing on managing real risks rather than being overwhelmed by theoretical scores and alert fatigue.. To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the NVD provides baseline technical metrics aligned with the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 6 articles for you...
78
encryptionweb serveropen source serverC2Net: Stronghold Secure Web Server Offers 128-Bit Encryption
Computer security firm C2Net announced the release of the new open source Stronghold Secure Web server at the European Linux Expo in London, Friday. The product from this US-based company is based on the open source Apache . . . . Computer security firm C2Net announced the release of the new open source Stronghold Secure Web server at the European Linux Expo in London, Friday. The product from this US-based company is based on the open source Apache Web server and features 128-bit encryption. Open Source software enabling secure Web transactions contradicts the assumption that access to source code weakens security. The link for this article located at ZDNet is no longer available. . Tech Innovations revealed the Fortress Safe Network platform, a novel proprietary tool boasting 256-bit safety features at the Global Tech Fair.. Stronghold Secure Web Server, C2Net Launch, Linux Expo 2023, Open Source Security, Web Transactions. . LinuxSecurity.com Team
Jan 02, 2020
•
Vendors/Products
67
phishingpayment securitysecure transactionsAnalyzing 3D Secure Risks: Phishing in Online Card Payments
Ross Anderson reports (via Bruce Schneier blog): Online transactions with credit cards or debit cards are increasingly verified using the 3D Secure system, which is branded as "Verified by VISA" and "MasterCard SecureCode". This is now the most widely-used single sign-on scheme ever, with over 200 million cardholders registered. It's getting hard to shop online without being forced to use it. . In a paper I'm presenting today at Financial Cryptography, Steven Murdoch and I analyse 3D Secure. From the engineering point of view, it does just about everything wrong, and it's becoming a fat target for phishing. So why did it succeed in the marketplace? Quite simply, it has strong incentives for adoption. Merchants who use it push liability for fraud back to banks, who in turn push it on to cardholders. Properly designed single sign-on systems, like OpenID and InfoCard, can't offer anything like this. So this is yet another case where security economics trumps security engineering, but in a predatory way that leaves cardholders less secure. We conclude with a suggestion on what bank regulators might do to fix the problem. The link for this article located at Bruce Schneier is no longer available. . In a paper I'm presenting today at Financial Cryptography, Steven Murdoch and I analyse 3D Secure. F. anderson, reports, bruce, schneier, blog), online, transactions, credit, cards, debit. . LinuxSecurity.com Team
Feb 01, 2010
•
Cryptography
78
data encryptionopen source securitysecure transactionsExploring Lokitech's Open Source Solution for Credit Card Security
Lokitech Inc., a small software security firm in suburban Washington, D.C., has crafted an Open Source-based security solution for credit card processing that will run with .NET and Java enterprise systems. . .. Lokitech Inc., a small software security firm in suburban Washington, D.C., has crafted an Open Source-based security solution for credit card processing that will run with .NET and Java enterprise systems . Lokitech's approach allows a business to store encrypted credit card lists and other sensitive information, says the company's CEO, Serge Knystautas. Lokitech developed the encryption solution for an Internet-based casino project, involving teams in the U.S., Canada, U.K. and Costa Rica, but the resultant easy-to-deploy two-way encryption platform is finding a larger audience, taking the risk out of using Open Source solutions for securing mission-critical data. "We needed a way to store credit card numbers and account information without making the integration between different teams overly complicated. The technique we came up with allowed us to ensure that backups and communication were secure without adding significant costs or complexity," Knystautas added. The link for this article located at OETrends is no longer available. . Lokitech Inc., a small software security firm in suburban Washington, D.C., has crafted an Open Sour. lokitech, small, software, security, suburban, washington, crafted. . LinuxSecurity.com Team
Nov 14, 2003
•
Vendors/Products
67
data protectionencryptionopensslExploring RSA Encryption in OpenSSL for Secure Financial Transactions
When sending your credit card number through a public medium, such as the Internet, your financial credibility may be compromised if the number is not first encrypted. It is impossible to tell who may be listening in on your connection as you shop for new CDs or books. The RSA encryption method often is used to hide your credit card number from would-be thiefs on the Internet, because it uses a public key to hide your information and a private key to reveal it.. . .. When sending your credit card number through a public medium, such as the Internet, your financial credibility may be compromised if the number is not first encrypted. It is impossible to tell who may be listening in on your connection as you shop for new CDs or books. The RSA encryption method often is used to hide your credit card number from would-be thiefs on the Internet, because it uses a public key to hide your information and a private key to reveal it. This article banishes the mystery surrounding RSA encryption and explains how a realistic implementation of RSA works in the OpenSSL library. The only files you need to concern yourself with appear in the openssl/crypto/bn and openssl/crypto/rsa subdirectories. Feel free to download and take a look at the code to get a feel for it before continuing. Symmetric vs. Asymmetric Encryption The best way to understand asymmetric encryption is to think of a box that has two kinds of keys: one key locks it and the other unlocks it. Anybody who has a copy of the locking key (aka public key) can put a secret in the box. Because only you have the unlocking key (aka private key), nobody else can reveal a secret that someone else locked in the box. This is different from symmetric key encryption, in which the same key is used for locking and unlocking. The link for this article located at Linux Journal is no longer available. . When sending your credit card number through a public medium, such as the Internet, your financial c. sending, credit, number, through, public, medium, internet,financial. . LinuxSecurity.com Team
Sep 25, 2003
•
Cryptography
67
encryptionOpenSSLopen sourceSun Donates Elliptic Curve Technology To OpenSSL For Secure Transactions
Sun's "elliptic curve" technology is involved in the process of using keys to encrypt and decrypt information for electronic transactions. Such encryption lets people buy products online, for example, while shielding their credit card number from prying eyes. The Santa Clara, . . . . Sun's "elliptic curve" technology is involved in the process of using keys to encrypt and decrypt information for electronic transactions. Such encryption lets people buy products online, for example, while shielding their credit card number from prying eyes. The Santa Clara, Calif.-based server seller donated the technology to the OpenSSL project, a programming group that makes an open-source version of the Secure Sockets Layer (SSL) encryption system. Elliptic curve cryptography will enable secure communications with devices that don't have as much calculating power as most desktop computers, said Whitfield Diffie, Sun's chief security officer and a pioneer of the Diffie-Hellman "public key" cryptography method used today in SSL and other encryption systems. Diffie spoke Thursday during a news conference at the SunNetwork conference here. The link for this article located at cnet.com is no longer available. . The advanced elliptic curve framework developed by Sun improves the security of digital transactions and has been contributed to the OpenSSL project.. Elliptic Curve, Open Source Encryption, Secure Transactions, Public Key Cryptography. . LinuxSecurity.com Team
Sep 20, 2002
•
Cryptography
78
information protectionuser controlLinux systemBell Labs Launches New Authentication Software for Linux Systems
The software, which the company said will not require a Web site to alter its existing authentication process, works with Linux, Solaris, Unix and Windows, among other operating systems. The software, which the company said will not require a Web site to alter its existing authentication process, was originally written for the Plan 9 operating system, a Unix-like OS. However, it works with a host of other operating systems as well, including Linux, Solaris, Unix and Windows.. . .. The software, which the company said will not require a Web site to alter its existing authentication process, works with Linux, Solaris, Unix and Windows, among other operating systems. The software, which the company said will not require a Web site to alter its existing authentication process, was originally written for the Plan 9 operating system, a Unix-like OS. However, it works with a host of other operating systems as well, including Linux, Solaris, Unix and Windows. It relies on two separate but complementary programs to deal with information and authenticate users as they shop, bank or conduct other secure transactions online. With the Bell Labs' approach, each user is in control of his or her personal information Latest News about personal information. One of the programs, Secure Store, is responsible for storing such personal data Latest News about personal data. The other, called Factotum, is an agent that authenticates the user's identity. By using two programs, the new software separates stored data from the authentication process. . The software, which the company said will not require a Web site to alter its existing authenticatio. software, which, company, require, alter, existing, authenticatio. . LinuxSecurity.com Team
Aug 07, 2002
•
Vendors/Products
67
opensslcertificate authorityssl certificateManaging SSL Certificates: Setup and Best Practices for Security
A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages. This HOWTO will also deal with non-linux applications: there is no use to issue certificates if you can't use them.. . .. A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages. This HOWTO will also deal with non-linux applications: there is no use to issue certificates if you can't use them. .. All applications won't be listed here, but please, send me additional paragraphs and corrections. As indicated in the introduction, this documents is an hand-on HOWTO, and it is therefore required that you consult the man pages of the OpenSSL software. You should as well read security books to learn how your security could be compromised. Certificates are meant to increase the security of your transactions, it is VERY important that you understand all the security implications of your actions and what security OpenSSL does not provide. The link for this article located at TLDP is no longer available. . A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates . first, approach, manage, certificate, authority, certificates. . LinuxSecurity.com Team
May 10, 2002
•
Cryptography
82
public key infrastructuredigital certificatesecure transactionsDOD to Use GSA Digital Certificates for Secure Contractor Transactions
The Defense Department intends by the end of this year to use the General Services Administration's governmentwide digital certificates to authenticate electronic trans.actions with many of its contractors and outside partners. In 1999, DOD awarded its own contract to create the . . . . The Defense Department intends by the end of this year to use the General Services Administration's governmentwide digital certificates to authenticate electronic trans.actions with many of its contractors and outside partners. In 1999, DOD awarded its own contract to create the Interim External Certificate Authority (IECA), which issues and manages public-key infrastructure certificates to Defense partners. Those certificates are equivalent to the medium-level certificates issued internally to DOD personnel. The Pentagon is now working with GSA to bring together the IECA and GSA Access Certificates for Electronic Services (ACES) contracts. That will enable the department to take advantage of the governmentwide pricing the GSA contract provides, and it also sets a single strategy for the private-sector entities that work with both Defense and civilian agencies, officials said. The link for this article located at FCW is no longer available. . The Defense Department intends by the end of this year to use the General Services Administration's . defense, department, intends, general, services, administration's. . Anthony Pell
Jul 02, 2001
•
Government
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!