Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 14 articles for you...
76
open sourcesecurity initiativesoftware securityOpenSSF's Progress And Future Vision For Open Source Security
OpenSSF was launched in August of 2020 as “a cross-industry collaboration that brings together leaders to improve the security of open source software (OSS)”. This article provides an overview of OpenSSF's mission, what it’s accomplished in its first six months and its plans for the future. . The Open Source Software Foundation (OpenSSF) officially launched on August 3, 2020 . In this article, we’ll look at why the OpenSSF was formed, what it’s accomplished in its first six months, and its plans for the future. The world depends on open source software (OSS), so OSS security is vital. Various efforts have been created to help improve OSS security. These efforts include the Core Infrastructure Initiative (CII) in the Linux Foundation, the Open Source Security Coalition (OSSC) founded by the GitHub Security Lab, and the Joint Open Source Software Initiative (JOSSI) founded by Google and others. It became apparent that progress would be easier if these efforts merged into a single effort. The OpenSSF was created in 2020 as a merging of these three groups into “a cross-industry collaboration that brings together leaders to improve the security of open source software (OSS).” . The Collaborative Development Initiative (CDI) was formally established on September 15, 2021. This write-up outlines its objectives.. OpenSSF, Open Source Security Foundation, OSS Collaboration, Software Security Initiative. . Brittany Day
Jan 29, 2021
•
Organizations/Events
76
risk mitigationsoftware securityvulnerability managementOpenSSF Grows Security Efforts Welcoming New Contributors Like Canonical
The Linux Foundation's Open Source Security Foundation (OpenSSF) looks to jointly mitigate risks inherent to the open-source style of development, and the foundation just announced that a total of 16 new contributors have joined OpenSSF including Canonical, Facebook, Samsung, Huawei Technologies, and more. . Security has always been of utmost importance to the entire open source ecosystem. Eric S. Raymond, one of the luminaries of the open source movement, in his famous essay, Cathedral and the Bazaar, wrote “given enough eyeballs, all bugs are shallow.” While still true, the complexity of software, and the increasing number of collaborators, puts an increasing onus on the eyeballs hunting for vulnerabilities. In addition to well-defined security policies at a project level, virtually all of the top organisations that contribute to open source software have security initiatives of their own. . Protection is crucial within the open-source community, with emerging programs bolstering efforts to address weaknesses.. Open Source Security, Software Risk Management, Vulnerability Mitigation. . Brittany Day
Oct 30, 2020
•
Organizations/Events
76
cybersecurity strategysecurity collaborationBlack Hat USABlack Hat USA NOC: Insights on Security Collaboration and Teamwork
At Black Hat USA, the network operations center (NOC) and security operations center (SOC) are one in the same — reasonable for a network that exists to serve a huge gathering of security professionals. While the network that exists for a high-intensity week is unique in many ways, in others it is a concentrated example of what is possible when professionals with different areas of expertise — and different vendors — work together.. Neil Wyler, known to most as "Grifter," made sure that working together is what happened in the NOC. He described the scope of the Black Hat network operation, explaining that the team used the physical cable provided by the facility (in this case, the Mandalay Bay Convention Center) but brought in everything else. From demarc to access points, everything was deployed in less than a week, then was expected to operate without flaw for another week before it disappeared. The link for this article located at DarkReading is no longer available. . Elena Morin facilitates seamless communication within the SOC during DEF CON, exemplifying cooperation in cybersecurity responses.. Black Hat USA, Network Operations Center, Cybersecurity Strategies, Security Collaboration, Event Security. . Brittany Day
Aug 31, 2018
•
Organizations/Events
74
information sharingsecurity initiativescloud securityRackspace Leads Cloud Security Collaboration For Real-Time Sharing
Rackspace is leading an effort to create a new group of top-tier cloud companies that it hopes will share information about security in close to real time. Rackspace chief security officer Brian Kelly today told The Reg at a Sydney event that he feels cloud companies have to take a lead to address security challenges. . Rackspace, he said, operates a skunkworks in which it is considering approaches such as asking CPU-makers to add security functions to silicon in order to make dedicated security appliances less relevant. That effort, he said, has seen Rackspace hire two of three leaders of the US military's online operations squads because Rackspace wants that kind of expertise and experience on staff. The link for this article located at The Register UK is no longer available. . Rackspace, he said, operates a skunkworks in which it is considering approaches such as asking CPU-m. rackspace, leading, effort, create, group, top-tier, cloud, companies, hopes. . Dave Wreski
Jul 30, 2015
•
Network Security
82
cyber threatscyber defenseNSAGoogle And NSA Partnership For Enhanced Cyber Defense Against Attacks
Google is finalizing an agreement with the National Security Agency to help the search giant ward off cyberattacks, according to the Washington Post. The electronic surveillance organization is expected to help analyze a cyberattack on Google that the company said originated in China, so that the company can better defend itself against future attacks, the newspaper reported Wednesday. . The arrangement is reportedly being designed to allow the two groups to share information without violating Google's privacy policies or laws governing online communications. Google declined to comment on the report, and the NSA did not immediately respond to a request for comment. Google disclosed in January that e-mail accounts belonging to human rights activists in China had been compromised and said the attacks originated in China. The company said it discovered the attacks in mid-December. And while it did not specifically implicate the Chinese government, Google said it may withdraw from doing business in China. China's government responded by reiterating that companies doing business in that country must respect and adhere to its laws and later issued statements denying any state involvement in the cyberattacks, as well as defending its Internet censorship. China also warned of strained U.S.-China relations after U.S. Secretary of State Hillary Rodham Clinton formally denounced Internet censorship in a speech. The link for this article located at CNET is no longer available. . Microsoft and FBI establish a partnership to enhance surveillance protocols aimed at countering threats from Russia.. Google NSA Partnership, Cyber Defense, Information Sharing, Security Strategies, Cyberattacks. . Anthony Pell
Feb 04, 2010
•
Government
78
network isolationsecurity collaborationvirtualization securityCisco, NetApp, VMware Collaborate on Enhancing Virtualization Security
Cisco, NetApp and VMware announced a project to improve the security of virtualization deployments, with a focus on isolating applications that use the same physical network, server and storage resources in multi-tenant systems.. Cisco, NetApp and VMware Tuesday announced a project to improve the security of virtualization deployments, with a focus on isolating applications that use the same physical network, server and storage resources in multi-tenant systems. Virtualization security remains a work in progress The companies are providing clients a The link for this article located at ComputerWorld is no longer available. . Dell, EMC, and Red Hat announce a collaboration aimed at enhancing safety in cloud environments, focusing on data protection strategies.. Virtualization Security, Cisco Collaboration, Network Isolation. . LinuxSecurity.com Team
Jan 26, 2010
•
Vendors/Products
78
security practicesopen sourcesecurity collaborationAdvocating Enhanced Security Collaboration In Open Source Software
" The security chiefs of several large infrastructure and software vendors said they are doing all they can do to embed security into their products, but they agreed that more work must be done to improve security between their platforms. " How well does the open source community spread security issues? Does Redhat and Novel work together to improve security? One of the best ways to improve security is to have all players share their patches to fix vulnerabilities fast. . Secure software code is a priority at Oracle, said Oracle CSO, Mary Ann Davidson. She suggested more collaboration between vendors on security issues and called on the US National Institute of Standards and Technology (NIST) to encourage the development of a secure software auditing standard. Davidson said such a standard could force better collaboration and ultimately reduce flaws in software code. The link for this article located at ComputerWeekly.com is no longer available. . At Oracle, safeguarding software code is paramount, highlighting partnerships with vendors to improve security protocols and methodologies.. Secure Software, Collaboration In Security, Vendor Cooperation, Code Auditing Standards. . LinuxSecurity.com Team
Jun 30, 2007
•
Vendors/Products
74
network securityaccess controlidentity managementOracle And Honeywell Collaborate On Integrated Security Management Systems
It might not seem as if a building security guard and a network administrator have much in common. But they do--and the distinction between the two is blurring more every day. It's true that the people who control building access from security desks and those securing computer networks both watch traffic and walk perimeters to safeguard an organization's assets. But now, technology, tighter security controls, federal regulations and potential cost benefits are bringing the two traditionally separate worlds together--and the convergence is driving industry alliances that may have seemed unusual in the past. . Oracle, for example, has partnered with Honeywell and Lenel to make its identity and access-manager software work with the physical access systems sold by those companies. A similar announcement from Novell and Honeywell is expected in coming weeks. "It used to be the guns, gates and guards versus the bit chasers and the hacker trackers," said Howard Schmidt, president of the Information Systems Security Association, an international group of IT security professionals. "Technology has fundamentally changed the way all those groups do business. We're much more united today than in the past." Unifying technologies include network-connected surveillance cameras and mechanisms to control building access that tie into the same systems used to grant network access, said Schmidt, a security consultant who has served as cybersecurity adviser to the White House and ksecurity executive at Microsoft and eBay. "We're seeing the technologies that used to be restricted to physical space--the cameras, the alarm systems, the card readers--all of which were unique to a hard-wired analog environment, moving into an IP-based digital system," Schmidt said. The Internet Protocol, or IP, is used to connect computers on modern networks. Software can catch what the human eye might not, such as somebody sneaking into a building behind another person who just swiped a security badge. Also, a single system forcredentials can replace multiple access systems and passwords. One badge, or smart card, could be used to enter buildings, log on to networks and buy lunch in the campus cafeteria. Removing security silos "It is all about removing the silos around security," said Wynn White, vice president of security and management products at Oracle. Many software applications already let users sign on with a single password--the integration of physical and logical security takes that several steps further, he said. Through integration, organizations will get a better view of their overall security, said Geoffrey Turner, an analyst at Forrester Research. "You now are able to follow through in securing both tangible and intangible assets," he said. Ultimately, this should provide more security for employees, as well. The link for this article located at ZD Net is no longer available. . Oracle, for example, has partnered with Honeywell and Lenel to make its identity and access-manager . might, building, security, guard, network, administrator, common. . Brittany Day
Mar 20, 2007
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!