Network Security
system security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Vendors/Productsincident response cloud security
incident response cloud security Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
May 19, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
67
encryptioncryptographysecure communicationRevolutionary Human-Based Cryptography Provides Secure Communication
University researchers claim to have designed a 'nearly unbreakable' cryptography model based on the human respiratory system, which they say could make life tough for criminals and spying governments.. The new class of secure communications was modelled off recent discoveries into the way the human heart and lungs coordinated rhythm information. The link for this article located at IT News is no longer available. . Unearth a groundbreaking 'almost indestructible' encryption method inspired by the mechanics of the human breathing apparatus.. Human-Based Cryptography, Secure Communication Model, Innovative Security Design. . LinuxSecurity.com Team
Apr 07, 2014
•
Cryptography
76
digital securityattack strategieshacking methodsComprehending Hacking Techniques For Effective Security Design
The term "Hacker" describes "one who creatively overcomes obstacles". Today in the digital age, this term has been shrouded with mystery, confusion and misconceptions. How can one expect to defend a stronghold, without first understanding the methods and methodologies of attack? How can one expect to design, implement and defend an architecture, without a deep understanding of a hackers' frame of mind? These are basic questions every Technical Security Designer and Coordinator should ask. . There is a very good training organized by Prime View to be held in Manhattan this month, called Hacking Defined Boot Camp,instructed by people from See-Security. The link for this article located at Hacking Defined is no longer available. . Understanding hacking techniques is essential for strengthening digital defenses in the Hacking Defined Boot Camp, enabling proactive threat anticipation and timely response. Hacking Techniques, Digital Security, Cyber Attack Strategies. . Brittany Day
Oct 20, 2005
•
Organizations/Events
67
encryptioncryptographysecurity designInnovative CS2 Block Cipher Boosts Security and Efficiency
In this paper we describe our new CS2 block cipher which is an extension of the original CS-Cipher. Our new design inherits the efficiency of the original design while being upgraded to support a larger block size as well as use a slightly improved substitution box. We prove that our design is immune to differential and linear cryptanalysis as well as argue it resists several other known attacks. . . Unveil the groundbreaking CS2 Encryption Algorithm: an upgraded iteration of the CS-Cipher boasting superior safety and optimized performance.. CS2 Block Cipher, cryptographic algorithms, secure encryption methods. . LinuxSecurity.com Team
Mar 25, 2005
•
Cryptography
76
data protectiontrusted computingembedded systemsDiscover Trusted Computing Security Applications at Boston Conference
Embedded systems designers attending next week's Embedded Systems Conference, Boston, can see Trusted Computing components and applications in action and learn how to design in security based on Trusted Computing specifications. . . .. Embedded systems designers attending next week's Embedded Systems Conference, Boston, can see Trusted Computing components and applications in action and learn how to design in security based on Trusted Computing specifications. TCG's specifications have been developed to help vendors build products that let users protect critical data and information in a variety of computing systems. More than 5 million computing systems with hardware to protect passwords, digital keys and certificates have been shipped, and many applications for using this hardware are available. As embedded devices, smart sensors and other intelligent controllers become pervasive on wired and wireless networks, security is increasingly critical. The link for this article located at BUSINESS WIRE is no longer available. . Engineers specializing in embedded systems can find reliable computing solutions at the Embedded Systems Symposium happening in Boston during the upcoming week.. Embedded Systems, Trusted Computing, Security Solutions, Conference Boston, Data Protection. . Anthony Pell
Sep 08, 2004
•
Organizations/Events
74
access controlweb securityopen source projectAnalyzing Security Risks In Web Applications Utilizing Open Source Tools
Security is something that no application can afford to ignore, and it is a particularly large challenge for web applications. A web application deployed on the Internet is subject to potential attack from anywhere, whereas an application contained on an internal intranet has at least fewer locations from which it is vulnerable to attack (usually). The HTTP protocol, which most web applications rely on, was not intended as a secure or session-oriented protocol at all. . . .. Security is something that no application can afford to ignore, and it is a particularly large challenge for web applications. A web application deployed on the Internet is subject to potential attack from anywhere, whereas an application contained on an internal intranet has at least fewer locations from which it is vulnerable to attack (usually). The HTTP protocol, which most web applications rely on, was not intended as a secure or session-oriented protocol at all. As a result, web applications must make use of a number of techniques to layer security onto this protocol. Those of who are not in the business of wheel-reinventing will immediately look about for a framework, preferably based on existing standards, to provide these services for us. Sometimes, however, no one framework is a perfect fit for the job at hand. We might want some of the features of one framework, but other features that are only available in another. In this article we'll use as a backdrop for our discussion an open source project designed for just such a purpose, the Keel meta-framework. Its security design is a practical example of a security structure that can be applied to many different projects. Authentication The first step in figuring out what someone is allowed to do is to figure out who they are, in a provable manner. Java provides the Java Authentication and Authorization Service (JAAS) API for just this purpose. By selecting and configuring the proper LoginModule (or modules, as more than one can be used) we can easily take advantage of a substantialnumber of different authentication mechanisms, including LDAP, Microsoft's Active Directory (which is close but not quite LDAP-compliant), file-based and even database-based authentication. Open source LoginModule implementations exist for all of these options, as well as for many more. Multiple LoginModules can even be used to request the user authenticate themselves by more than one means - perhaps a passphrase and a biometric signature, for example. Ideally, we will use a existing component to provide the front-end for JAAS's LoginModules (which are UI-independent), enabling us to verify the identity of our users with little or no actual coding required. Many frameworks also provide all of the trimmings needed for a complete authentication solution, including a way for a user to request a new password, verify their email address, and other similar operations. The link for this article located at ebcvg.com is no longer available. . Security is something that no application can afford to ignore, and it is a particularly large chall. security, something, application, afford, ignore, particularly, large, chall. . Anthony Pell
Aug 02, 2004
•
Network Security
79
OpenBSDopen sourcesoftware securityExploring OpenBSD's Security Design Philosophy and Its Merits
Upside has a great article on the security merits of OpenBSD, the operating system developed with security as a specific focus. "... when it comes to OpenBSD, the open-source operating system that for the last three years has built . . .. Upside has a great article on the security merits of OpenBSD, the operating system developed with security as a specific focus. "... when it comes to OpenBSD, the open-source operating system that for the last three years has built up a near-perfect track record for software security, it shouldn't be too surprising that project leader Theo de Raadt espouses a similarly reductionist design philosophy." The link for this article located at Upside Today is no longer available. . OpenBSD is renowned for its commitment to security, emphasizing simplicity and code correctness with proactive vulnerability management and strict code audits. OpenBSD, Secure Design, Software Philosophy. . LinuxSecurity.com Team
May 17, 2000
•
Security Projects
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Discover faster search, smarter navigation, and deeper Linux security insights. Read More