Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 20 articles for you...
79
security advisoryautomationsoftware securityGitHub Actions Security Alerts for Developers' CI/CD Workflows
Cloud-based code hosting platform GitHub has announced that it will now start sending Dependabot alerts for vulnerable GitHub Actions to help developers fix security issues in CI/CD workflows. . "When a security vulnerability is reported in an action, our team of security researchers will create an advisory to document the vulnerability, which will trigger an alert to impacted repositories," GitHub's Brittany O'Shea and Kate Catlin said. GitHub Actions is a continuous integration and continuous delivery (CI/CD) solution that enables users to automate the software build, test, and deployment pipeline. The link for this article located at The Hacker News is no longer available. . GitHub has introduced notifications for developers regarding insecure GitHub Actions, enhancing security measures in CI/CD pipelines and mitigating potential threats.. GitHub Actions, CI/CD Tools, Developer Security, Automated Alerts. . LinuxSecurity.com Team
Aug 11, 2022
•
Security Projects
83
malwarelinuxMicrosoftMicrosoft Alerts on 8220 Gang Malware Threat to Linux Systems
Microsoft warns over recent work by the '8220' malware gang to compromise Linux systems and install cryptomining malware. . Microsoft says it has spotted "notable updates" to malware targeting Linux servers to install cryptominer malware. Microsoft has called out recent work from the so-called "8220 gang" group, which has recently been spotted exploiting the critical bug affecting Atlassian Confluence Server and Data Center, tracked as CVE-2022-26134. . Microsoft has detected enhancements in malware focusing on Linux environments, with the intention of deploying cryptocurrency mining applications.. Linux Malware, Cryptomining Threats, Microsoft Alerts. . LinuxSecurity.com Team
Jul 01, 2022
•
Hacks/Cracks
83
malwarecybercrimesecurity threatElectroRAT Malware Targets Linux, Windows, macOS: One Year of Deception
The ElectroRAT cryptocurrency-stealing malware was written from scratch and was likely installed by thousands of Linux, Windows and MacOS users over the past year. . Soaring cryptocurrency valuations have broken record after record over the past few years, turning people with once-modest holdings into overnight millionaires. One determined ring of criminals has tried to join the party using a wide-ranging operation that for the past 12 months has used a full-fledged marketing campaign to push custom-made malware written from scratch for Windows, macOS, and Linux devices. The operation, which has been active since at least January 2020, has spared no effort in stealing the wallet addresses of unwitting cryptocurrency holders, according to a report published by security firm Intezer. The scheme includes three separate trojanized apps, each of which runs on Windows, macOS, and Linux. It also relies on a network of fake companies, websites, and social media profiles to win the confidence of potential victims. . The infamous ElectroRAT malware has compromised cryptocurrency wallets across Linux, Windows, and macOS platforms, leveraging user confidence over the span of twelve months.. ElectroRAT, Crypto Malware, Cross-Platform Security, Cryptocurrency Theft, Cybercrime Awareness. . LinuxSecurity.com Team
Jan 06, 2021
•
Hacks/Cracks
83
unauthorized accessdata breachsecurity incidentDunkin' Donuts Customer Alert: DD Perks Data Breach Incident
Dunkin' Donuts has alerted DD Perks account holders to a security incident after learning an unauthorized party accessed some of their usernames and passwords, NBC News reports. . DD Perks is a rewards program that lets Dunkin' customers purchase food and beverages for pickup and receive free drinks via rewards points and on their birthdays. On Oct. 31, a security vendor detected a third party accessing users' accounts. It believes these actors stole usernames and passwords from other companies and used them to attempt DD Perks logins. The link for this article located at DarkReading is no longer available. . DD Perks is a rewards program that lets Dunkin' customers purchase food and beverages for pickup and. dunkin', donuts, alerted, perks, account, holders, security, incident, learning, unautho. . LinuxSecurity.com Team
Dec 01, 2018
•
Hacks/Cracks
83
unauthorized accessdata breachincident reportData Breach Impacts 2800 California Girl Scouts Significantly
Thousands of members of the Girl Scouts in California may have had their personal information stolen after one of its official email accounts was accessed by an unauthorized third party last month.. Reports suggest that as many as 2800 girl scouts in Orange County may have been affected in an incident which lasted just a day. The link for this article located at InfoSecurity is no longer available. . Reports suggest that as many as 2800 girl scouts in Orange County may have been affected in an incid. thousands, members, scouts, california, their, personal, information, stolen. . LinuxSecurity.com Team
Oct 29, 2018
•
Hacks/Cracks
83
data breachinvestigationstate departmentState Department Employee Data Alert: No Classified Info Breach
As detailed by the Politico report confirmed by US officials, the employees affected by the e-mail system hack were notified, but the alert sent also discloses the fact that the e-mail system containing classified information was not breached.. According to the breach alert sent to the State Department workforce there "is an ongoing investigation and we are working with partner agencies to conduct a full assessment. We will reach to any additional employees as needed." The link for this article located at Softpedia News is no longer available. . A security notification reveals an instance of employee data leakage within the Department of State, yet assures that no sensitive information was affected.. State Department Security, Data Breach Assessment, Employee Data Notification. . LinuxSecurity.com Team
Sep 18, 2018
•
Hacks/Cracks
83
data protectionsecurity incidentsecurity alertSaks and Lord & Taylor Data Breach: 5 Million Cards Compromised
Hackers made off with a whopping five million credit and debit card numbers from Saks Fifth Avenue, Saks Off 5th and Lord & Taylor, placing it “among the most significant credit card heists in modern history.”. Parent company Canada-based Hudson’s Bay Company announced the breach affecting the North American stores on Sunday, saying, “HBC has identified the issue, and has taken steps to contain it.”. Cyber criminals infiltrated Saks Fifth Avenue and Lord & Taylor, compromising 5 million credit card records and triggering a response from HBC for heightened security protocols.. Credit Card Theft, Retail Breach, Data Protection, Payment Card Security. . LinuxSecurity.com Team
Apr 02, 2018
•
Hacks/Cracks
77
security advisorycyber attackrisk assessmentNovember 2023 Cyber Risk Assessment for Security Incidents
I. Well, that The link for this article located at SecurityPark is no longer available. . Explore recent cybersecurity threats and strategies to evaluate vulnerabilities effectively this month.. Cyber Attack, Risk Assessment, Incident Management, Security Alert. . LinuxSecurity.com Team
Sep 07, 2011
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!