Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 3 articles for you...
83
data managementuser behaviorsecurity controlThe Risks of Shadow IT: Controlling Data Management and Security
Once upon a time, not so long ago, the IT admin chose exactly what hardware and software would be used by employees. Recent trends like the consumerization of IT and BYOD (bring your own device) have shifted the balance of power, but IT still has to maintain some degree of control over the applications used and where sensitive data is stored.. Many users just download apps or start using unsanctioned services, though, and introduce unnceccesary security risks through "shadow IT." The link for this article located at CSO Online is no longer available. . Many users just download apps or start using unsanctioned services, though, and introduce unnceccesa. admin, chose, exactly, hardware, software, would. . LinuxSecurity.com Team
Dec 05, 2013
•
Hacks/Cracks
83
data breachSQL injectioncyber threatSQL Injection Responsible For 83% Of Data Breaches Since 2005
From 2005 through today, SQL injection has been responsible for 83% of successful hacking-related data breaches. It is estimated that there are a total of 115,048,024 SQL injection vulnerabilities in active circulation today. . Imperva The link for this article located at SecurityPark is no longer available. . Cross-site scripting (XSS) vulnerabilities persist as a significant danger, with 79% of security breaches linked to them over the past decade. Be vigilant!. SQL Injection, Cyber Threats, Security Controls, Hacking Techniques. . LinuxSecurity.com Team
Sep 29, 2011
•
Hacks/Cracks
78
mobile securityenterprise solutionssecurity controlOpen Kernel Labs Unveils SecureIT Mobile Enterprise for Improved Security
Embedded virtualisation company Open Kernel Labs has introduced a mobile security product based on the company's phone-specific hypervisor, the OKL4 'microvisor'.. The SecureIT Mobile Enterprise package allows the creation of independent secured domains on a mobile device, the company announced at Mobile World Congress 2011 on Monday. The product, which combines an embedded hypervisor with tailored security software, is part of a future vision where "employees bring personal devices to work and happily let employers install enterprise mobility solutions [on them]", Open Kernel Labs said. The link for this article located at ZDNet UK is no longer available. . The SecureIT Mobile Enterprise package allows the creation of independent secured domains on a mobil. embedded, virtualisation, company, kernel, introduced, mobile, security, product, based. . LinuxSecurity.com Team
Feb 15, 2011
•
Vendors/Products
74
application securitysecurity controlcloud computingCloud and Outsourcing Challenges for Application Security Control
The cloud -- and outsourcing in general -- breaks off pieces of the stack beneath any given application. That removes the stack from an enterprise CISO's control, and that's not good.. That, according to Wendy Nather, a senior analyst in The 451 Group's enterprise security practice. She spoke out about the problem at the firm's client security event Dec. 1. Even consolidated security offerings that try to unify the stack are no longer as useful, said Nather, in a presentation entitled, "How the Cloud Breaks Application Security (and a lot of other things)." There's less to manage, she noted, and unifying management technologies like identity and access management and governance risk and compliance have less to work with, too. The link for this article located at CSO Online is no longer available. . Markus Vance emphasizes the complexities that remote work and hybrid environments present for data protection and organizational governance.. Application Security Management, Cloud Security, Outsourcing Risks. . Alex
Dec 08, 2010
•
Network Security
82
risk managementIT securitycomplianceFinal NIST Guidelines for Federal IT System Security Compliance
The National Institute of Standards and Technology has released the final standard for securing agency computer systems under the Federal Information Security Management Act. Federal Information Processing Standard 200 [1] sets minimum security requirements for federal systems in 17 security areas. It is the third of three publications required from NIST under FISMA, which requires executive branch agencies to establish consistent, manageable IT security programs for non-national security systems. The intent of FISMA is to implement risk-based processes for selecting and implementing security controls. . FIPS 199 [2], released two years ago, establishes standards for categorizing IT systems as low, moderate or high-impact, depending on the effect of a breach of confidentiality, integrity or availability of the system. Special Publication 800-53 [3] - "Recommended Security Controls for Federal Information Systems", lays out the tools to be used under FIPS 200 to secure IT systems. Agencies must be in compliance with FIPS 200 by March 2007. The link for this article located at Government Computer News is no longer available. . FIPS 199 [2], released two years ago, establishes standards for categorizing IT systems as low, mode. national, institute, standards, technology, released, final, standard, securing. . Brittany Day
Mar 17, 2006
•
Government
77
access controlsecurity enhancementoperating systemModern Operating Systems Benefit from SELinux Enhancements and Features
Security Enhanced Linux has move into the mainstream of operating system architecture in recent years. For those who don't understand the technology, many articles exist. SELinux provides mandatory access control to a wider audience. It helps eliminate O-day attacks. The agenda for the 2006 SELinux Symposium has just been announced and some project leaders of Linux distributions may way want to attended. . Existing distributions such as Fedora are including SELinux in the default build, and ports are underway to bring SELinux functionality to BSD and Darwin. Management has already stressed the importance of SELinux in many organizations. So, security minded systems administrators will find SELinux an important area to gain proficiency. The link for this article located at LXer.com is no longer available. . Explore the pivotal role of SELinux in modern operating systems, elevating security measures and governance for various distributions.. SELinux, Access Control, Operating System Security. . LinuxSecurity.com Team
Dec 19, 2005
•
Server Security
82
security controlfederal systemNIST draftNIST Draft Proposal on Security Controls for Federal Systems
The National Institute for Standards and Technology today released the first draft of a publication describing mandated security controls for federal information systems. NIST officials want agencies to experiment with the initial public draft, "Special Publication 800-53: Recommended Security Controls for Federal Information Systems.". . .. The National Institute for Standards and Technology today released the first draft of a publication describing mandated security controls for federal information systems. NIST officials want agencies to experiment with the initial public draft, "Special Publication 800-53: Recommended Security Controls for Federal Information Systems." It outlines electronic and physical controls for systems categorized under three levels of potential impacts, such as what would happen if someone steals information from a federal system and modifies the data or disrupts a government service. Low-, medium- and high-impact levels are defined in draft "Federal Information Processing Standard (FIPS) 199: Standards for Security Categorization of Federal Information and Information Systems." NIST officials released the final draft of that standard in September. Controls outlined in the Publication 800-53 draft fall into three classes -- management, operational and technical -- and are then broken down further into families. For example, under the management class, families include security planning and acquisition of information systems and services. Operational class families focus on issues such as incident response and contingency planning and operations. NIST's Computer Security Division plans to use agencies' comments from the initial draft and an open workshop in March to develop final security controls that would become the new "FIPS 200: Minimum Security Controls for Federal Information Systems." FIPS 199 and 200 are required under the Federal Information Security Management Act of 2002. NIST expects to publish FIPS 200 in the fall of 2005, when its controls will become mandatoryfor all federal agencies. Comments are due by Jan. 31, 2004, and may be submitted to
Nov 04, 2003
•
Government
77
network managementsystem administrationsecurity controlEnhancing TCP Server Management With Tcpserver for Better Security
If you're still running inetd, it's time to move on. Either xinetd or tcpserver offer superior security and control. We're going to look at tcpserver. Note that there is one limitation: it manages only tcp. If you're using UDP or rpc services, tcpserver alone will not do the job. In that case, xinetd is the way to go.. . .. If you're still running inetd, it's time to move on. Either xinetd or tcpserver offer superior security and control. We're going to look at tcpserver. Note that there is one limitation: it manages only tcp. If you're using UDP or rpc services, tcpserver alone will not do the job. In that case, xinetd is the way to go. The (in)Famous DJB tcpserver is part of the ucspi-tcp suite of tools by none other than the famous, and infamous, Daniel J. Bernstein. Professor Bernstein seems to inspire strong passions in the tech community; some refuse to use his software because they do not like the author. Other objections are that his programs install themselves in non-standard file locations, and that he keeps too tight a grip on the code. Personality issues aside, I find that his programs are lean, fast, secure, and worthy on their own merits. A special item of note is Professor Bernstein led the suit against the United States Government against export controls on encryption software, and won. DJB's security model is based on a zero-trust premise. His programs don't even trust themselves- each function is isolated from other parts of the program. They run in user accounts with restricted rights; services that require root access are as restricted and limited as possible. Any successful intrusion will be severely limited, if an intruder can get in at all. The link for this article located at CrossNodes is no longer available. . Tcpserver provides significant advantages over inetd for managing TCP services, focusing on security, isolation, resource controls, and improved logging capabilities. Tcp Server Management, Xinetd Alternative, Daemon Security, Network Control. . LinuxSecurity.comTeam
Nov 25, 2002
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!