Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 41 articles for you...
209
open source softwareIT managementsecurity challengeOpen Source Software Security Challenges: Survey Insights from IT Managers
More than 40% of technology managers say security and compliance are an issue with open source. . How pervasive is open source software ? Extremely pervasive. Is it getting any easier to work with? Not much easier, sorry. That's the prognosis of a recent survey of 872 IT managers, which finds eight in 10 companies employ open source software. However, using freely available and low-cost or no-cost licensed software only solves part of the problem -- there is still the challenge of securing the software, as well as having the skills and support to maintain and run it effectively. . Uncover perspectives on the omnipresent role of open-source solutions and the related cybersecurity dilemmas facing IT administrators.. Open Source Usage, Technology Management, Security Compliance, IT Challenges. . Brittany Day
Feb 22, 2023
•
Security Trends
209
open sourcesecurity challengesoftware maintenanceOpen Source Challenges: Security Risks And Software Maintenance
Open source may be the most viable option for most companies today but it comes with its own set of problems too. . Many people support the use of open source software (OSS). After all, why would we keep trying to build code that addresses issues that have already been resolved by others? Why not share the information and progressively and iteratively enhance the current open source solutions? These egalitarian values, however perhaps fundamental to civilization in general, not to mention software, nonetheless include conflicts that have been a problem for millennia. The problem with open source software security is that just because anyone can view the source code doesn’t imply they will. There are extensively used open-source projects that are only being maintained by a limited number of engineers. These engineers are unable to provide their time and effort completely voluntarily since they also need to pay their bills. . Explore the landscape of open-source vulnerabilities and the potential threats that modern organizations encounter when safeguarding essential software applications.. Open Source Software, Security Challenges, Software Maintenance. . Brittany Day
Oct 09, 2022
•
Security Trends
214
network securitysecurity challengecyber riskIdentifying Risks From Unsupported IoT Devices in Your Network
Imagine reading a headline in tomorrow’s news stating that your neighbor’s identity was stolen and their life savings cleaned out by criminals who entered through their ‘smart’ washing machine. Sound ridiculous? Well, have you checked your own home Wi-Fi network lately? . You might have several connected household gadgets and other internet of things (IoT) devices tethered wirelessly through a misconfigured router with no firewall settings. Is the firmware current? Are security patches up to date? Still not convinced this is a serious problem? Then consider this glaring example of how dangerous an outdated device can be. . With increasing smart devices at home, unsupported IoT risks rise. They lack updates, making them vulnerable to attacks and undermining network reliability.. IoT Devices, Cybersecurity Risk, Network Protection, Firmware Updates, Security Challenges. . Brittany Day
Aug 30, 2021
•
IoT Security
83
malwarecyber threatLinuxHackers Target Linux with Exotic Programming Languages in Malware
Hackers are turning coding languages such as Go, Rust, Nim and DLang into next-gen malware targeting Linux and Windows systems, enabling them to avoid signature detection and add layers of obfuscation. . Hackers are increasingly turning to relatively obscure programming languages when coding malware in a bid to avoid detection and pose greater challenges for the cyber security industry. Security professionals are coming across greater numbers of malware strains that are being written in ‘exotic’ languages such as coders are shifting to silicon valley backed programming languages , Rust, Nim, and DLang, according to researchers with Blackberry. Operators are even adopting these languages to rewrite existing malware families and create tools for new malware sets. . Cybercriminals are increasingly leveraging obscure coding languages to develop malicious software targeting both Linux and Windows, complicating the detection process.. malware Development, Cyber Threats, Exotic Languages, Linux Security. . LinuxSecurity.com Team
Jul 28, 2021
•
Hacks/Cracks
79
security challengeopen source projectLinux FoundationCelebrating Five Years of Zephyr Project: Tackling Security for IoT Devices
As the Linux Foundation's Zephyr Project celebrates its fifth anniversary, it has become apparent that addressing constrained device security challenges is more critical than ever. Luckily, the Zephyr Project is rising to meet these challenges. Learn how. . Noting nearly 1,000 contributors, 50,000 commits building advanced support for multiple architectures including ARC, Arm, Intel, Nios, RISC-V, SPARC and Tensilica, and more than 250 boards; the Zephyr Project is throwing a virtual party that will run from June 8 – 10 this year. The first-ever Zephyr Developer Summit is open to the public, free of charge, and full of Zephyr leaders from around the world presenting real-world use cases, best practices, mini-conferences, and more. . Celebrating its 5th anniversary, the Zephyr Project addresses IoT security challenges, empowering developers to enhance safety in resource-limited devices and applications. Zephyr Project, Constrained Device Security, Linux Foundation Events, Open Source Architecture. . LinuxSecurity.com Team
Jun 08, 2021
•
Security Projects
79
security challengebug bountycustom LinuxAzure Sphere OS Bug Bounty: Win Up To $100,000 Testing Security
Microsoft is offering hackers up to $100,000 if they can break the security of the company’s custom Linux OS. The software giant built a compact and custom version of Linux last year for its Azure Sphere OS, which is designed to run on specialized chips for its Internet of Things (IoT) platform. The OS is purpose-built for this platform, ensuring basic services and apps run isolated in a sandbox for security purposes. . Microsoft now wants hackers to test the security of the Azure Sphere OS, paying up to $100,000 if the Pluton security subsystem or Secure World sandbox is breached. The bug bounty program is part of a three-month research challenge that runs from June 1st until August 31st. “We will award up to $100,000 bounty for specific scenarios in the Azure Sphere Security Research Challenge during the program period,” explains Sylvie Liu, a security program manager at Microsoft’s Security Response Center. . Google is providing $150,000 for evaluating the security of its Android platform, showcasing a significant initiative in enhancing cybersecurity.. Azure Sphere OS, Microsoft Security, bug bounty program, IoT security. . LinuxSecurity.com Team
May 06, 2020
•
Security Projects
76
information securitysecurity challengeDEFCON conferenceInsights from the L0pht Reunion at DEFCON Conference on Security Issues
Despite security coming a long way from warnings of the internet being able to be taken down in fewer than 30 minutes, it has “still got a long way to go.”. Reuniting six members of the L0pht hacker team at the DEFCON conference in Las Vegas, moderator Elinor Mills asked Dildog, Space Rogue, Mudge, John Tan, Weldpond and Kingpin, who used their hacker names as they had done 20 years ago when testifying to the US Senate and had done again when visiting again this year, whether they felt that the original testimony had worked. The link for this article located at InfoSecurity is no longer available. . Reuniting six members of the L0pht hacker team at the DEFCON conference in Las Vegas, moderator Elin. despite, security, coming, warnings, internet, being, taken. . Brittany Day
Aug 11, 2018
•
Organizations/Events
83
security challengebrowser exploitevent summary2013 Mobile Pwn2own Event: NFC And Browser Exploits Exposed
The annual Mobile Pwn2own competition, sponsored by Hewlett-Packard's Zero-Day Initiative (ZDI) and held in Tokyo on Nov. 12 and 13, yielded some surprising results.. The mobile version of the Pwn2own hacking challenge offers security researchers cash and prizes for successfully exploiting mobile devices. In the 2013 event, researchers exploited Android and iOS devices alike. The link for this article located at eWeek is no longer available. . The Cyber Assault Challenge showcased how cybercriminals took advantage of Wi-Fi and software vulnerabilities to win rewards in Berlin.. Mobile Exploitation, Pwn2own Challenge, NFC Attacks. . LinuxSecurity.com Team
Nov 17, 2014
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!