Explore top 10 tips to secure your open-source projects now. Read More
×
Server Security
data privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Security Vulnerabilities security advisory linux distribution
security advisory linux distribution ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party certificate authority, regardless of the installed operating system (OS). Reported shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits even on systems with UEFI Secure Boot enabled.....
Jul 16, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security news
We found 61 articles for you...
76
security insightsopen sourcesoftware managementSignificance Of SPDX 3.0 For Software Management And Security Insights
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security enthusiasts, and sysadmins. The SPDX community, in collaboration with the Linux Foundation , has evolved the widely used Software Bill of Materials (SBOM) communication format with a comprehensive set of updates, introducing new features and enhancements tailored to modern system use cases. . This article presents the benefits of SPDX 3.0, offering valuable insights into its implications for the security and management of software systems. What Is the Significance of the SPDX 3.0 Release? One of the most intriguing aspects of SPDX 3.0 is the introduction of profiles, which offer tailored information for popular use cases such as security, software build attestation, precise licensing, AI model training, and data set provenance. These profiles are gateways to facilitate the straightforward use of SPDX for specific scenarios, empowering developers, security engineers, data scientists, and legal professionals to leverage SPDX effortlessly for their specific use cases. This sparks curiosity for tech enthusiasts seeking to understand how SPDX 3.0 can enhance their software management practices. The significant impact of SPDX 3.0 on the software ecosystem must be highlighted, emphasizing the community-driven development process and its alignment with ISO governance standards. The involvement of key industry experts and organizations in evolving SPDX as a user-centric SBOM format shows its potential to address diverse needs, paving the way for enhanced software package management, improved compliance with licensing obligations, streamlined security practices, and optimized software build processes. Users and developers are prompted to ponder the long-term consequences of adopting SPDX 3.0 and its potential implications for mitigating risks, building trust, and demonstrating commitment to industry best practices. Industry leaders, such as Arm,Chainguard Labs, EPAM Systems, Huawei, Intel, GitHub, Google, Microsoft, MITRE, and others, have expressed their support and recognition of SPDX 3.0's importance in software supply chain security . Our Final Thoughts on SPDX 3.0 We aim to shed light on the importance of SPDX 3.0 in revolutionizing software management, bringing attention to its relevance for security practitioners and technology professionals. If you want to stay abreast of the latest advancements in open-source and Linux security, be sure to subscribe to our newsletters . Stay informed and secure, fellow Linux users! . Explore the benefits of SPDX 3.0 and its influence on software governance and security protocols for industry experts.. SPDX 3.0, Software Bill of Materials, Linux security, software management, open source compliance. . Brittany Day
Apr 17, 2024
•
Organizations/Events
82
risk managementcybersecuritysecurity insightsAddressing Software Supply Chains: Open Source Security Insights
In the wake of several major cybersecurity incidents - the most recent being the Colonial Pipeline ransomware attack, the government wants to shore up its software supply chain. There’s no silver bullet, but Open Source shows significant promise in meeting this challenge. . Recent intrusions into federal agencies and critical infrastructure are causing the government to more closely examine how software is made, in addition to who’s making it and where. Even before President Joe Biden and his transition team entered the White House amid the unfurling SolarWinds crisis, the executive branch was working to collectively reduce weaknesses in the government’s software supply chain. A new executive order gets deeper into core software development techniques than anything from previous administrations. . Recent incidents involving federal agencies underscore vulnerabilities within government software supply chains, prompting an examination of open-source threats.. Software Supply Chain, Open Source Security, Cybersecurity Threats, Software Integrity. . Brittany Day
May 19, 2021
•
Government
209
open source softwaresecurity insightsopen sourceUnderstanding Supply Chain Risks and Protective Strategies
Experts including Dr. David Wheeler, Director of Open Source Software Supply Chain Security at the Linux Foundation , discuss the growing trend in software supply chain attacks which use “ dependency or namespace confusion ” techniques, and how to secure software supply chains against these attacks. . Following a growing trend in software supply chain attacks which use “ dependency or namespace confusion ” techniques, I sat down for a discussion on software supply chain security with a few experts on the topic. Dr. David Wheeler, Director of Open Source Software Supply Chain Security at the Linux Foundation Dr. Trey Herr, Director of Cyber Statecraft Initiative at the Atlantic Council Brian Fox, CTO and Co-founder of Sonatype As the attack vector continues to gain further steam in the early months of 2021, we chatted about what’s happening, why this vector has taken off and how organizations can protect ourselves. The link for this article located at Security Boulevard is no longer available. . Fortify your development pipelines against emerging threats by leveraging professional advice and implementable tactics.. Supply Chain Security, Dependency Confusion, Software Protection. . Brittany Day
Mar 09, 2021
•
Security Trends
209
security practicescybersecuritysecurity insightsUnderstanding Linux Security: Resilience Against Increased Attacks
Linux is becoming increasingly popular, and for good reason - the open-source OS is flexible, customizable and highly secure. Luckily, Linux is superior in design to most platforms, making the inevitable increase in attacks targeting Linux less of a threat. Jack Wallen offers an eplanation, along with his perspective on the topic. . Linux powers big business--of that there is no debate. With more and more manufacturers selling Linux preinstalled on desktops and laptops, the writing on the wall is clear: Linux popularity is growing faster than most expected. For some, that means the rise of attacks on the platform is inevitable. I'm not concerned. I know, that sounds like crazy talk. After all, we've seen a number of attacks reported over the past few years. But why am I not worried? . As the adoption of Linux continues to soar, Jack Wallen delves into the strength of the OS in countering escalating cyber threats and vulnerabilities.. Linux Threats, Cybersecurity Insights, Open Source Resilience, Attack Trends. . Brittany Day
Dec 16, 2020
•
Security Trends
79
security insightssecurity surveysoftware securityLinux Foundation: New Contributor Security Survey on Open-Source Practices
Securing Free/Libre and open-source software (FLOSS) is a big deal and The Linux Foundation wants to know exactly how programmers are dealing with security issues. In an effort to gain insight on the topic, the Linux Foundation and Harvard have announced a new Linux and open-source contributor security survey. . Except for the desktop, Linux and open-source run the IT world. With great power comes great security responsibilities. While open-source security issues can be overstated , the simple truth is antique, insecure open-source software is everywhere . The Linux Foundation knows this. To address it, the Foundation's Core Infrastructure Initiative (CII) and the Laboratory for Innovation Science at Harvard (LISH) have developed a survey for FLOSS contributors . This builds on top of their "Vulnerabilities in the Core, a preliminary report and Census II of open-source software." The study laid out a methodology for understanding and addressing open-source software structural and security complexities. Specifically, it also identifies the most commonly used FLOSS components in production applications and examines them for potential vulnerabilities. . The Linux Foundation collaborates with Harvard to initiate a survey designed to assess the security protocols adopted by contributors in the open-source community.. Open Source Security, Linux Contributors, FLOSS Security, Software Insights. . LinuxSecurity.com Team
Jun 19, 2020
•
Security Projects
76
security insightsopen sourcelinux summitEssential Insights From Linux Security Summit on Zephyr and Fuchsia
In case you missed it, videos for Linux Security Summit NA are now available. On Linux.com, we covered a couple of these in depth, including: Redefining Security Technology in Zephyr and Fuchsia By Eric Brown. If you’re the type of person who uses the word “vuln” as a shorthand for code vulnerabilities, you should check out the presentation from the recent Linux Security Summit called “Security in Zephyr and Fuchsia.” In the talk, two researchers from the National Security Agency discuss their contributions to the nascent security stacks of two open source OS projects: Zephyr and Fuchsia. The link for this article located at Linux.com is no longer available. . Explore significant takeaways from the Linux Security Summit NA recordings, encompassing security technology advancements to deliberations on operating system initiatives.. Linux Summit Videos, Security Insights, Open Source Security. . Brittany Day
Oct 22, 2018
•
Organizations/Events
76
security insightscyber defensetechnology trendsBHUSA Insights: Exploring Cyber Defense and Political Dynamics
Opening Black Hat USA in Las Vegas, Black Hat founder Jeff Moss commented on the convergence of cybersecurity and political issues and said that world events “have caught up with us and we’re being tested.” . Saying that if offense is a purely technical endeavor, defense is “largely political” in spend, strategy and what is being defended. “I believe the technology we are delivering favors offense, the machine learning, the reinforcing algorithms, so the momentum is on offense, but in defense we’re stuck with politics,” he said. The link for this article located at InfoSecurity is no longer available. . The intersection of digital security and governance is evident, impacting protective measures and tactics amid international conflicts.. Cyber Defense, Political Strategy, Offensive Security, Technology Trends. . Brittany Day
Aug 09, 2018
•
Organizations/Events
76
security insightssecurity conferenceinsider threatUncovering Insider Threats: Insights from DerbyCon 5.0 Conference
Salted Hash is in Louisville, Kentucky for DerbyCon 5.0. All weekend long, in-between talks and training, this blog will be updated with various items of note from the show or thoughts form those attending. Today's starter topic is insider threats. . This topic isn't new, but it hasn't really gone away either. A friend shared some data from a company called Bay Dynamics. They do predictive analytics, so insider threats is a subject they're rather interested in following. . Delve into revelations about insider threats shared at DerbyCon 5.0, highlighting advancements in predictive analytics and engaging discussions around proactive security measures.. insider threat, security conference, DerbyCon, predictive analytics. . Dave Wreski
Mar 14, 2017
•
Organizations/Events
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!