Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
79
security cultureemployee trainingawareness programKey Elements for Cultivating a Successful Security Culture
When we were asked to keynote a recent CSO event, it was a pleasant surprise that the top concern of the CSOs was "security culture." From performing many security assessments and penetration tests, it is sadly obvious that even the best technical security efforts will fail if their company has a weak security culture. . It is heartwarming that CSOs are now moving past straight technological solutions and moving towards instilling a strong security culture as well. To determine the components of a truly successful security awareness program, we performed a study to identify critical success factors for building one. We interviewed security awareness practitioners at Fortune 500 companies and surveyed the security staff and general employees at the companies. Additionally, we validated the results and gathered additional information at a security executive event in the United Kingdom with more than 150 security executives participating. The link for this article located at CSO Online is no longer available. . Uncover essential components that fuel effective security awareness initiatives and enhance the security culture within organizations.. Security Culture, Awareness Program, Success Factors, Employee Training. . LinuxSecurity.com Team
May 03, 2013
•
Security Projects
79
risk awarenesssecurity culturecompliance improvementImproving Security Culture Through Unconventional Practices
The lessons I learned letting my son break the rules hold true for security, too. Here's why sometimes breaking a rule leads to better compliance: 1. It creates an opportunity for an individual to practice autonomy, on the condition that they live with the consequences. This allows an individual to be recognized, and feel respected.. 2.The experience created a unique, shared context to discuss the reason for the rule. Generally this leads to a better understanding of the rule; sometimes, it actually creates a better understanding of why the rule needs to change. 3. It creates a better bond between people; individuals get closer to the consequences of their actions, and everyone improves their relationship. The link for this article located at CSO Online is no longer available. . Exploring the concept that challenging conventions can enhance protection measures and foster improved connections within groups.. Compliance Improvement,Risk Awareness,Security Culture. . LinuxSecurity.com Team
Sep 17, 2012
•
Security Projects
76
cybersecurity trendssecurity culturehackersCelebrating 20 Years of DefCon: A Retrospective on Hackers and Security
In 1992, Jeff Moss (third from left in second row) invited a bunch of hacker friends to come to Las Vegas to party in the desert. Now in its 20th year, the DefCon hacker conference draws more than 7,000 hackers, security pros and undercover feds each year.. Dead Addict (center), a mainstay of DefCon, is one of the few hackers who has been with the conference from year one when he helped founder Jeff Moss organize the first gathering and secure the participation of Assistant US Attorney Gail Thackeray to speak to the hackers following her work on the notorious Operation Sun Dial case. The link for this article located at Wired is no longer available. . DefCon, a premier hacker conference, has shaped a global cybersecurity community for 20 years, evolving from a small meetup to a massive event where ideas flourish. DefCon 20, Hacker Culture, Cybersecurity Trends, Cybersecurity History, Hacker Events. . Dave Wreski
Jun 22, 2012
•
Organizations/Events
74
risk managementdata protectionenterprise securityMaking Corporate Security Second Nature: A Collective Effort
Enterprise security executives need to make practices such as safe USB use and discreet handling of patient or customer data as commonplace as not accepting luggage from strangers in airports or wearing a seat belt when driving. . But they can't do it alone; it takes an entire organization to secure corporate assets, protect data from breaches and make sure enterprisewide risk remains low. "Security is everyone's responsibility," says John Kirkwood, vice president of Information Security Strategy at American Express, who spoke recently at a Boston seminar hosted by risk-management company Consul. Kirkwood, formerly chief information security officer at the financial services giant, says his role has evolved from security policy maker to enterprise risk-management evangelist. "Security has gone from being a server room concern to a boardroom type of issue," he says. The link for this article located at Network World is no longer available. . Comprehensive collaboration is vital for safeguarding company resources and maintaining robust information security.. Enterprise Security, Data Protection Strategies, Risk Management Strategies. . Brittany Day
Aug 05, 2006
•
Network Security
74
risk managementdata protectioncorporate securityImportance of Strong Password Policies in Corporate Security Practices
Failure to properly instil a culture of effective password management in a company could land its directors in jail, while wading through alternatives to "fatally flawed" passwords is a process mired in "fear, uncertainty and doubt" according to experts on all sides of the debate. The only given is that the need to get it right is now more pressing than ever, according to one top lawyer. David Naylor, partner at law firm Field Fisher Waterhouse, said companies need to ensure they have strict policies in place regarding password management and said best practice would be to incorporate these as requirements in the company's contractual arrangements with employees and third-parties with access to the company systems. . Naylor said: "Companies should make certain that employees and contractors are aware of the importance of maintaining systems security and the need to keep usernames and passwords secure and confidential. "If a company does not ensure security of its systems, any failure to maintain personal data securely may constitute an offence under the Data Protection Act 1998, opening the company to potential regulatory intervention and fines, and possibly civil and criminal liability." In addition to the legal risks, security breaches can lead to plenty of equally serious business and reputational damage. The link for this article located at silicon.com is no longer available. . Organizations need to implement robust password protocols to prevent potential legal repercussions and damage to their reputation.. Password Management, Corporate Security, Cybersecurity Culture. . Brittany Day
May 16, 2006
•
Network Security
77
patch managementIT risk managementcomplianceImproving Business Resilience and Security Compliance Today
Companies are increasingly considering their security as world events cast doubt on their ability to deal with natural disaster, human error or malicious attack. Spending on security has reached record levels, and continues to climb as businesses seek to reassure shareholders . . . . Companies are increasingly considering their security as world events cast doubt on their ability to deal with natural disaster, human error or malicious attack. Spending on security has reached record levels, and continues to climb as businesses seek to reassure shareholders and comply with standards and changing legal requirements. However, being secure is about more than simply buying firewalls, antivirus software and login technology. "Good IT security is about good management. It's more important to maintain patches and to document systems and procedures than it is to install expensive new security devices," says Bart Vansevenant, director of European security strategies at security service provider Ubizen. "Secure environments are typically well-documented, with a procedure for regularly patching systems, good monitoring and control of servers, and where good security is part of a culture." The link for this article located at VNUNet is no longer available. . Companies are increasingly considering their security as world events cast doubt on their ability to. their, companies, increasingly, considering, security, world, events, doubt, ability. . LinuxSecurity.com Team
Sep 25, 2003
•
Server Security
83
Las Vegassecurity culturehacker conferenceDefcon 9: A Gathering of Hackers Celebrating Network Skills
A delegate hacked the conference network and was given an award. This is typical of the Defcon conference which attracts enthusiasts and saboteurs alike, says Simon Edwards. The crowds that descended on Las Vegas's casinos, strip clubs and all-you-can-eat restaurants last weekend were a little different from the norm. They were a little more troublesome, too.. . .. A delegate hacked the conference network and was given an award. This is typical of the Defcon conference which attracts enthusiasts and saboteurs alike, says Simon Edwards. The crowds that descended on Las Vegas's casinos, strip clubs and all-you-can-eat restaurants last weekend were a little different from the norm. They were a little more troublesome, too. For these thrill-seekers were computer hackers and security experts from all over the world - distinguishable from the general public thanks to vivid red and yellow entry passes, and occasional outlandish haircut and dress sense. They had gathered for the annual hacker conference known as Defcon. Now in its ninth year, it is claimed by the organisers to be the largest and most important computer "underground" meeting in the world. The estimated number of registered visitors ran to 4,500 this year. The link for this article located at The Guardian is no longer available. . An attendee breached the symposium's system and was celebrated at the exclusive Black Hat gathering renowned among tech enthusiasts.. Hacker Conference,Cybersecurity Culture,Defcon 9,Hacking Community,Network Security. . LinuxSecurity.com Team
Jul 26, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!