Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 118 articles for you...
210
buffer overflowDoS attackweb applicationWeb Application Security: Understand Buffer Overflows and DoS Risks
In the current scenario, web applications are gaining momentum, and businesses and corporations are hosting several services. This increased utilization of web applications naturally raises the odds of having cybersecurity vulnerabilities. Grasping these Linux buffer overflow vulnerabilitie s is critical in your quest to protect sensitive information and maintain network integrity. . In this article, we’ll examine the basics of web application security vulnerabilities, their implications, and the strategies for mitigating associated risks. What are Web Application Security Vulnerabilities? Vulnerabilities in web applications refer to weaknesses in a system that a hacker would leverage to access unauthorized information, execute malicious code, install malware, or steal sensitive information. According to a report by CISA, about 85% of successful attacks employ known vulnerabilities. The vulnerabilities could be associated with defects in coding, poorly chosen configurations, or outdated software. Overcoming such network attacks is especially difficult for small businesses, corporations, and even end-users, who may struggle to simultaneously compete with several security attacks. Since security threats in wireless networks become a critical risk for every organization, an extended range of security knowledge becomes very important to prevent carelessness from becoming the root cause of application-layer vulnerabilities. A vulnerability scanner will typically scan your environment and compare the results with a vulnerability database or a list of known flaws. However, to properly understand the cyber threats and vulnerabilities you will likely be exposed to, it is crucial to begin with the basics. Buffer Overflow Vulnerability Basics One of the most famous classes of vulnerabilities is the buffer overflow. Knowing how to handle Linux buffer overflow vulnerabilities is critical to preventing buffer overflow attacks. An overflow occurs when a program writes more data to a bufferthan it is designed to hold or when a program attempts to put data beyond a buffer. This can corrupt the application and lead to the execution of malicious code that enables cybercriminals to gain unauthorized access to systems and networks. Buffer overflows have been well documented, yet they continue to cause misery for enterprises of all sizes. An attacker exploiting a web application's stack execution may be able to execute arbitrary code and take control of a machine. According to the OWASP Top Ten, buffer overflow vulnerability remains one of the more problematic concerns because it has a tremendous potential impact. Types of Buffer Overflow Vulnerabilities According to OWASP, there are two significant types of Linux buffer overflow vulnerabilities: Stack-Based Buffer Overflow: This includes an attacker sending malicious code to an application in the form of data, loading itself into a stack buffer. This operation overwrites other data on the stack and gives the attacker control. Heap-Based Buffer Overflow: This vulnerability generally attacks heap memory. It is based on flooding a program's memory space beyond its usage limits and overwriting the data in the heap to exploit certain programming peculiarities. Once this is performed, an attacker can adjust the software and thus gain unauthorized access. Denial of Service (DoS) Basics The other critical vulnerability within web applications is the DoS vulnerability, which stands for Denial of Service. The whole point of a DoS is to bring a machine or network down and thus render its services unavailable for legitimate users. An attacker generally sends vast amounts of traffic or a quantity of information that results in the crashing of the target; hence, legitimate users - employees or subscribers - cannot access the service. The FBI estimated that more than 70% of organizations have been victims of DoS at one time or another. Thankfully, DoS attacks can be remedied much faster than other attacks. Blocking or tracing DoSattacks is usually easier because a single device attacks a particular resource. Why Are These Basics So Essential? Understanding the basics of web application security vulnerabilities is essential, as these vulnerabilities form the foundation for attacks in network security—both well-known and obscure. Knowledge of these vulnerabilities equips you with an understanding of the threats you face. Understanding what web application security vulnerabilities exist, how they can be exploited through attacks, and the scenarios where an attacker would use the exploits organize your organization's preparation for whatever risks come its way. Best Practices for Vulnerability Management Best practices for securing your Linux environment against vulnerabilities and exploits include: Routine Vulnerability Scanning A vulnerability scanner will help you avoid security vulnerabilities in your apps. These scans automatically test your environment against a continuously updated database of known vulnerabilities, alerting and methodically allowing for mitigation before potential issues can be exploited. Several applications are well-regarded for performing routine vulnerability scanning on Linux systems, helping to ensure that potential security issues are identified and mitigated. OpenVAS (now called Greenbone Vulnerability Manager) is a comprehensive open-source tool for scanning and managing vulnerabilities, making it suitable for extensive security audits. Nessus, developed by Tenable, is another powerful and widely used vulnerability scanner that offers detailed reporting and high detection accuracy. Nikto is a straightforward yet effective web server scanner that hunts for known vulnerabilities, server configuration problems, and outdated software. Lynis is a robust security auditing tool for Unix-based systems focusing on hardening, compliance testing, and vulnerability detection. Lastly, ClamAV is a versatile open-source antivirus engine that can scan for various types ofvulnerabilities, including those related to email, files, and web content. Keep Software Up to Date Keep your software up to date. This means it will be kept secure, too. Most attacks happen via vulnerabilities known for some time, for which fixes have already been published. Keep your systems, libraries, and frameworks current to guard against vulnerabilities others know about. Several applications can help keep Linux software up to date, ensuring your system remains secure and efficient. Arch Linux and Manjaro Linux are popular due to their excellent package management systems, ensuring your servers always have access to the latest updates. For comprehensive patch management, tools highlighted by BleepingComputer include automated systems that seamlessly update your Linux operating system. APT (Advanced Package Tool) and Snap are are commonly used to manage updates on Ubuntu-based systems. Secure Coding Practices Developers should implement secure coding practices to avoid introducing vulnerabilities during development. This includes input validation, output sanitizing, and proper error handling to reduce and prevent buffer overflow and other vulnerabilities. For secure coding practices on Linux, several applications and resources stand out. The OWASP Secure Coding Practices Quick Reference Guide provides comprehensive guidelines for mitigating common software vulnerabilities and can be seamlessly integrated into the software development lifecycle. LinuxSecurity.com features articles and best practices for enhancing security in Linux web applications, focusing on defending against vulnerabilities like injection and cross-site scripting attacks. Another valuable resource is the OWASP Foundation , which provides extensive guidance on implementing a secure software development framework. Lastly, Snyk offers detailed insights into secure coding practices, making it easier for developers to write secure code from the ground up. Access Control Implementation Limit access tosensitive data and critical systems to prevent unauthorized access. Use role-based access to provide users with only the information and resources required to perform their roles. Security-Enhanced Linux (SELinux) and AppArmor provide mandatory access control (MAC) mechanisms to define what resources applications can access, enhancing system security. iptables is a powerful firewall tool that manages network traffic rules, which are crucial for controlling external and internal network access. TCP Wrappers offer host-based access control to monitor and filter incoming network requests, adding a layer of security to network services. PAM (Pluggable Authentication Modules) enables flexible authentication methods for programs, facilitating secure access control policies across different services. Regular Security Training Education in cybersecurity best practices is essential to reducing vulnerability risks. Regular training should be provided to update employees on new threats and prevention measures. For regular security training on Linux, Coursera offers comprehensive courses covering basic to advanced security concepts. Wiz provides essential best practices, including training on VPN solutions like OpenVPN and WireGuard for securing Linux systems. LinuxSecurity.com offers expert-recommended security practices for kernel hardening and filesystem protection. Coursera also has a course specifically for security experts, focusing on utilities, containers, networks, and firewalls. LinuxLinks provides a broad list of security applications and resources, assisting in training on various security tools and best practices. Our Final Thoughts on the Importance of Vulnerability Fundamentals The need for web applications to support business operations continues to grow. With this growth, knowledge of cybersecurity vulnerabilities becomes increasingly valuable. Securing your network from potential attacks by understanding some of the vulnerabilities that threaten Linux systems is essential to youand your organization. Learning the basics of different types of vulnerabilities, such as buffer overflows and DoS attacks, can prepare your organization to proactively fight these types of threats. . Understanding web application security is vital. Focus on buffer overflows and DoS attacks by validating inputs and using rate limiting to enhance safety. Web Application Security, Cybersecurity Basics, Buffer Overflow Threats, Vulnerability Management. . Brittany Day
Oct 02, 2024
•
Security Vulnerabilities
81
network securityVPNsecurity awarenessTunnelVision Attack Impacts VPN Security for Linux Systems
A novel attack called TunnelVision has been discovered. It compromises the security of virtually all VPN apps, rendering their purpose useless. The attack manipulates the DHCP server to divert VPN traffic to the attacker, allowing them to read, drop, or modify the traffic. Let's explore the implications of this attack for Linux admins so you are better equipped to protect the security and privacy of your Linux systems. . How Does TunnelVision Work? What Are the Implications of This New Attack? TunnelVision undermines VPNs' core purpose by exposing traffic to potential snooping and manipulation. The attack exploits a setting known as option 121 in the DHCP server, allowing the attacker to reroute VPN traffic through the DHCP server itself. This results in the traffic being transmitted outside the VPN's encrypted tunnel, effectively nullifying the protection provided by the VPN. The attack can be initiated by someone with administrative control over the network or by setting up a rogue DHCP server. The implications of the TunnelVision attack are significant. VPNs have traditionally been relied upon to secure Internet traffic and preserve user privacy, but this vulnerability undermines their effectiveness. As security practitioners, we must consider the potential impact this has on our networks and systems. This attack raises several points that demand our attention. Firstly, the attack technique may have existed since 2002, which raises concerns about how long this vulnerability has been exploited. Furthermore, only Linux and Android operating systems provide partial immunity to the attack, raising concerns about whether more robust security measures are required on other OSes. It should also be noted that someone with administrative control over the network can carry out the attack or by setting up a rogue DHCP server. How Can I Protect Against This Attack? The most effective fixes for TunnelVision involve running the VPN inside a virtual machine or connecting to the VPN through acellular device's Wi-Fi network. However, these solutions may not be feasible or practical for all users. The TunnelVision attack highlights the ongoing cat-and-mouse game between attackers and security practitioners. As technology advances, so do the methods used to compromise it. We must stay informed , adapt our security measures , and raise user awareness. To improve your understanding of VPNs and digital privacy, explore our Feature article, Linux VPN Myths Exposed: Separating Fact from Fiction for Enhanced Online Security. Our Final Thoughts on the TunnelVision Attack The TunnelVision attack exposes a vulnerability in virtually all VPN apps, negating their core purpose of securing internet traffic. As security practitioners, we need to be aware of the implications of this attack and take steps to mitigate the risks it poses. This means reassessing the security measures implemented on our networks, considering alternative VPN solutions , and educating our users about the potential risks associated with VPN usage. We can better protect our systems and preserve our online privacy by staying vigilant and proactive. . SecureNet highlights vulnerabilities in VPN usage, recommending Linux system administrators bolster security measures and increase user education for improved safe online practices.. VPN Security,TunnelVision Attack,Network Protection,User Awareness,Security Solutions. . Brittany Day
Jun 03, 2024
•
Privacy
76
open sourcesecurity awarenesssoftware securityLinus Torvalds Discusses Hardware Errors and Community Trust at Summit
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux development and the challenges the open-source community faces. Torvalds addressed hardware errors, malicious developers, and the hype surrounding Artificial Intelligence (AI). . This analysis explores the implications of Torvalds' statements and their impact on Linux administrators, infosec professionals, internet security enthusiasts, and sysadmins. What Critical Points Did Linus Torvalds Address at the Open Source Summit? One of the intriguing points raised by Torvalds is the issue of hardware errors and the slow response from hardware manufacturers. He expressed frustration about the time it takes for hardware fixes to be implemented, stating, "We have five generations of hardware that we can't fix after the fact, and it will take another couple of years before the actual new hardware [arrives] that can help you work around the problem." This raises questions about the long-term consequences of relying on hardware solutions that cannot be easily updated or patched . It also highlights the importance of proactive hardware design and development to prevent security vulnerabilities. Another notable discussion revolved around the threat of malicious developers infiltrating open-source projects. Torvalds recounted an incident in which attempts were made to insert bad patches into the Linux kernel . While the open-source nature of Linux allowed these attempts to be identified and thwarted, Torvalds emphasized the importance of community vigilance, stating, "A healthy community is the best defense." This brings attention to the need for trust in the open-source community and the potential impact on the overall security of open-source projects. It is also ironic that Torvalds and Dirk Hohndel, Verizon's Head of the Open Source Program Office, expressed skepticism towards AI hype. Torvalds dismissed AI as "autocorrect on steroids," highlighting the needfor caution when embracing AI technologies. This raises questions about the vulnerabilities that may arise from overreliance on AI solutions in security and administration. Additionally, Torvalds acknowledged the potential benefits of AI in bug detection and tool development but emphasized the importance of waiting for the technology to mature and prove its worth. Our Final Thoughts on Torvalds' Statements This article's critical analysis of Torvalds' perspectives reminds Linux administrators, infosec professionals, and sysadmins that no technology or community is immune to challenges and potential threats. We aim to spark curiosity and encourage readers to question the long-term consequences of hardware limitations, the trustworthiness of open-source projects, and the possible risks associated with emerging technologies like AI. As technical practitioners, it is vital to stay updated on these issues , engage in community support, and approach new technologies with a critical eye, ensuring the security and stability of the systems we manage. . At the recent Open Source Summit, Linus Torvalds voiced critical concerns about hardware reliability and trust in the open source community, stressing transparency and collaboration.. Open Source Summit, Hardware Errors, Linux Development, Community Trust, AI Security. . Anthony Pell
Apr 18, 2024
•
Organizations/Events
83
cyber threatsopen sourcesecurity awarenessGitHub Repo Confusion: Understanding Security Risks and Mitigation
Security researchers have uncovered a concerning cyberattack campaign that targets developers on GitHub , potentially affecting millions of repositories. This campaign utilizes repo confusion attacks, which exploit human error rather than package manager systems. . How Do These Attacks Work & What Are the Security Implications? The attackers clone popular repositories, inject them with malware , and upload them back to GitHub with identical names. These repositories are automatically forked thousands of times and promoted across various online platforms, increasing their visibility and the likelihood of developers mistakenly using them. One intriguing point is the level of sophistication in the attack. The malware deployed through these malicious repositories undergoes a complex unpacking process involving seven layers of obfuscation. Ultimately, it deploys a modified version of BlackCap-Grabber, a malicious code designed to steal sensitive information such as login credentials, browser passwords, and cookies. This stolen data is transmitted to the attackers' command-and-control servers for further malicious activities. The sheer scale of this attack is evident from the fact that even though GitHub's automated systems have removed many of the forked repositories, a significant number remain. The implications of this campaign are significant. It raises questions about the security of the software supply chain and the vulnerability of popular repositories on platforms like GitHub. While GitHub's security teams are actively working to detect and remove these malicious repositories, the subtlety of the attack makes it challenging. This highlights the need for constant vigilance and the adoption of advanced security measures. For security practitioners, this article is a stark reminder of the ever-evolving nature of cyber threats. It emphasizes the importance of staying updated on the latest strategies employed by attackers and adapting security measures accordingly. As the attack campaignmarks a shift from package managers to source code management platforms like GitHub, it reveals the attractiveness of these platforms for infiltrating the software supply chain. This realization necessitates reevaluating the security practices surrounding using third-party code and the protection of open-source repositories. Our Final Thoughts on These GitHub Repo Confusion Attacks Discovering millions of infected GitHub repositories has far-reaching implications for security practitioners. It underscores the software supply chain vulnerabilities and serves as a call to action for developers and organizations to remain vigilant. Cyber attackers constantly adapt their strategies, so infosec professionals must continuously enhance their security measures. These attacks are a wake-up call for the global technical community, emphasizing the importance of understanding and mitigating the risks associated with open-source repositories and the need for robust security practices in this digital era. . Investigate repo confusion threats on GitHub, their security consequences, and proactive strategies developers should implement.. GitHub Repo Confusion, Malware Injection, Cybersecurity Risks, Open Source Security. . Dave Wreski
Mar 04, 2024
•
Hacks/Cracks
209
security issuecyber threatsdata breachAnalyzing the Rise of Linux Malware and Its Consequences in 2020
Linux computers used to be safe from most forms of malware - but this is unfortunately no longer the case, as cyber criminals have come to recognize Linux as a valuable target. . Its reputation for security means Linux is often thought to be less vulnerable to the kinds of threats that regularly plague Microsoft Windows systems. Much of that perceived security comes from the relatively low number of Linux systems, but are cybercriminals starting to see value in choosing quality over quantity? Security researchers at companies such as Kaspersky and Blackberry, along with federal agencies like the FBI and NSA are warning about malware authors increasing their focus on Linux. The OS is now recognized as a gateway to valuable data such as trade secrets, intellectual property, and personnel information. Linux servers can also be used as a staging point for infection of wider networks full of Windows, macOS, and Android devices. . As malware threats escalate, cybercriminals are turning their focus towards Linux systems, transforming the dynamics of Linux cybersecurity.. Linux Malware,Cyber Threats,Security Issues. . Brittany Day
Dec 01, 2020
•
Security Trends
77
malwarecybercrimesecurity awarenessDocker Security Insights: Malware Threats and Developer Responsibilities
Three years after the first malware attacks targeting Docker, developers are still misconfiguring and exposing their Docker servers online. Docker malware is now common, making this lackadaisical attitude toward Docker security increasingly problematic. . Towards the end of 2017, there was a major shift in the malware scene. As cloud-based technologies became more popular, cybercrime gangs also began targeting Docker and Kubernetes systems . Most of these attacks followed a very simple pattern where threat actors scanned for misconfigured systems that had admin interfaces exposed online in order to take over servers and deploy cryptocurrency-mining malware. Over the past three years, these attacks have intensified, and new malware strains and threat actors targeting Docker (and Kubernetes) are now being discovered on a regular basis. . Engineers must focus on improving Docker safety in light of the increase in malware aiming at container systems since 2017.. Docker Security, Malware Threats, Developer Awareness, Cybercrime, Container Security. . LinuxSecurity.com Team
Dec 01, 2020
•
Server Security
209
open sourcesoftware developmentsecurity awarenessOpen Source Security Risks: Understanding Misconceptions for Businesses
The value of OSS is undeniable. OSS offers organisations greater flexibility and cost savings. However, it needs to be understood that no software is completely bullet proof and OSS shares the same inherent risks as traditional software. . The rapid pace of modern software development has allowed businesses to transform the way they run – yielding superior customer experiences, greater efficiencies, faster time to market and better cost optimisation. Software has enabled companies to disrupt their business environments by leveraging the agility and speed of change that only software can deliver. The companies that thrive today are those that realize that software innovation can drive agility, create differentiation and provide competitive advantages. With software so predominant, the use of Open Source Software (OSS) has grown in popularity over the last few years. The enticement of OSS is undeniable, and the vibrant open source community has rallied, resulting in significant contributions to the open source movement. As a result, developers are increasingly turning to OSS to aid their organization’s transformation. The link for this article located at Science Direct is no longer available. . Open source software (OSS) offers numerous advantages and challenges for organizations, enhancing transparency while introducing vulnerabilities that require careful management. Open Source Software, OSS Security Risks, Business Transformation, Software Development Challenges. . Brittany Day
May 28, 2020
•
Security Trends
209
Linux securityoperating systemsecurity awarenessCybersecurity Myths: What Linux Users Get Wrong About Security
Linux has managed to build a reputation around being one of the most secure operating systems available today. But too many people tend to take its built-in security for granted. . It gives them the false impression that they can do just about anything with it and still be safe. But that’s far from the truth. So let’s take a look at five such misconceptions and the underlying reality. The link for this article located at Mighty Gadget is no longer available. . Linux is often seen as a secure platform, but misconceptions about its immunity can lead to false confidence in security practices and potential risks.. Cybersecurity Misconceptions, Linux Users, Security Awareness, Linux Safety, System Vulnerabilities. . Brittany Day
Feb 11, 2020
•
Security Trends
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!