Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 12 articles for you...
78
Linux distributionsecurity modeluser privilegeKali Linux 2020.1 Release: Defaulting to Non-Root User for Security
The Kali Linux distribution is going to switch to a new security model by defaulting to a non-root user starting with the upcoming 2020.1 release. Learn more: . This change will come with the release of the 2020.1 version scheduled for late January 2020, but users can already test it via the daily builds . They will also be able to test it by downloading and running theweekly images released until Kali 2020.1 will be officially available. The link for this article located at Bleeping Computer is no longer available. . In the 2020.1 release, Kali Linux adopts a safety-first approach by defaulting to non-administrative user accounts, significantly improving user security.. Kali Linux Release, User Privilege Changes, Default Non-Root User, Linux Security Model. . LinuxSecurity.com Team
Jan 06, 2020
•
Vendors/Products
78
open-sourcesecurity modelpartnershipRed Hat Black Duck Partnership Enhances Container Security Delivery
We love Docker and containers. But, the more we use containers the more we worry exactly what it is we're running when we spin them up. So, Linux giant and cloud power Red Hat and Black Duck, a leader in automating securing and managing open-source software, are working together on establishing a secure and trusted model for containerized application delivery. . We love containers because they enable consistent operating environments for development, testing, and deployment. That's the good news. The bad news is that container security has lagged behind its advantages. . Red Hat and Black Duck's partnership enhances container security, ensuring applications deliver trust through integration of open source management and robust container tools. Docker Security, Open Source Management, Trusted Containers, Application Security, Container Ecosystem. . LinuxSecurity.com Team
Mar 14, 2017
•
Vendors/Products
74
risk managementthreat landscapesecurity modelInvestigating Cloud Security Frameworks for Enhanced Data Protection
Despite the numerous advantages presented by cloud computing, security is still the biggest factor holding back more widespread adoption by businesses. A recent survey by AlienVault found that an overwhelming 90 percent of organisations are still concerned about cloud security. . But many people don't realise that the cloud also presents a great opportunity for security. The automation and scale provided by the cloud gives us a platform that we can secure far better than any in the past. The cloud is not an inherently insecure environment. . But many people don't realise that the cloud also presents a great opportunity for security. The aut. despite, numerous, advantages, presented, cloud, computing, security, still, biggest, factor. . Anthony Pell
Mar 14, 2017
•
Network Security
82
access controldata managementsecurity modelNSA Accumulo Software: Advanced Label-Based Security for Data Storage
The National Security Agency has submitted its new, label-based data store software to the Apache Software Foundation, in hopes that others will further develop it for use in secure systems. . Called Accumulo, the software uses "expressive, fine-grained" labels that can tag each cell in a data store. Security policies can then be applied to the individual labels to, for example, allow an external server to access some cells but not others. Based on Google's Big Table design, Accumulo is a simple key/value data store, where providing the system with the key will return any data associated with that key. Featuring a distributed design, Accumulo can be run across multiple servers, making it a good candidate for managing big data systems, the NSA said. The link for this article located at Network World is no longer available. . Called Accumulo, the software uses 'expressive, fine-grained' labels that can tag each cell in a dat. national, security, agency, submitted, label-based, store, software, apache. . Alex
Sep 26, 2011
•
Government
79
network protectioncyber attackssecurity modelAddressing Security Fragmentation To Improve Network Protection
A new week, a new rash of attacks against security vendors, email marketers and banks. It would be easy to point fingers and laugh at the irony, especially in the case of security vendors, but that would be both petty and shortsighted.. The stark reality is that security breaches can, will and do happen to everyone. For every security control and process we put in place, somewhere else there's a vulnerability, a weakness, an untrained employee or a path of least resistance for an attack. All the point solutions in the world are not going to make us any more secure. What we desperately need is a new model for integrating security solutions across vendors, across devices, across operating systems and across the globe. Companies today are faced with a fundamental security conundrum. Their networks, applications and end-user devices are made up of a patchwork of dozens if not hundreds of vendor solutions. Each vendor may offer security features in their apps, security appliances, or even an entire range of security solutions. None of them really interoperate with any of the other vendors' security solutions (not unless you consider LDAP and syslog to be interoperability). None of them work on other vendor network devices. The link for this article located at Network World is no longer available. . Cyber threats are an ongoing challenge for all suppliers. It's essential to implement protective measures across systems seamlessly.. Security Integration, Cyber Attacks, Vendor Security Solutions, Network Protection. . LinuxSecurity.com Team
Apr 14, 2011
•
Security Projects
76
network securitysecurity modeluser trustExamining Zero Trust: Can We Trust Internal Networks Anymore?
The so-called Zero Trust model for security proposed by Forrester Research earlier this month has revived debate about the way organizations secure their networks.. Zero Trust means end users are no more trusted than outsiders, and that organizations must inspect all traffic, from the outside and on the inside as well. While this concept has stirred Big Brother worries among skeptics, it also resonates with some experts in light of the end user application-borne attacks as well as malicious or careless insiders. But does this user threat trend merit a whole new security model? Most security experts agree that you can't trust your internal network and have to assume you've been compromised, so it's a matter of detecting and stopping breaches before any information is stolen or damage is done. It's just that inspecting all internal traffic can be a tall order -- and maybe overkill. The link for this article located at Dark Reading is no longer available. . The concept of Zero Trust dictates that every user is scrutinized in the same way as external entities, emphasizing rigorous examination of all data flows.. Zero Trust Security, Network Inspection, End User Threats, Security Models. . Anthony Pell
Oct 01, 2010
•
Organizations/Events
78
open sourcesecurity modellinux kernelGreg Kroah-Hartman: Android Drivers Removed From Linux Kernel
After removing Google's Android driver code from the Linux kernel, Novell Fellow and Linux developer Greg Kroah-Hartman has argued that the mobile OS is incompatible with the project's main tree. Kroah-Hartman deleted the Android drivers on December 11 - Android code is no more as of version 2.6.33 of the kernel release - and yesterday, with a post to his personal blog, he explained the move in detail.. "No one cared about the code, so it was removed," writes Kroah-Hartman. "As I've stated before, code in the staging tree needs to be worked on to be merged to the main kernel tree, or it will be deleted." But the larger problem, he continues, is that Android uses a new lock type, new hooks for its "sometimes bizarre" security model, and a revamped framebuffer driver infrastructure. All this, he says, prevents "a large chunk" of Android drivers and platform code from merging into the main kernel tree. Google, he ultimately argues, has forked its mobile OS. Google did not immediately respond to our request for comment. But in a pair of posts to LWN.net, Mountain View open source guru Chris DiBona says that Android isn't in the main tree because the main tree doesn't want it. The link for this article located at The Register is no longer available. . 'No one cared about the code, so it was removed,' writes Kroah-Hartman. 'As I've stated before, code. linux, removing, google's, android, driver, kernel, novell, fellow, developer. . LinuxSecurity.com Team
Feb 04, 2010
•
Vendors/Products
74
identity managementsecurity modeldeperimeterisationModifying Security Frameworks for Organisations across Europe
When you add the responsibility for information and security in an organisation that ranges across Europe, life becomes even more complex. You also need to accommodate differences in mindset about legislative severity, and differences in national character. Within countries, many of the challenges remain the same for CIOs, wherever they are based. They must try to operate a security model that has changed from a "fortress" - where everything was kept out - to an "airport" style security. Now everyone is rushing around in different directions aiming for different destinations, and their credentials to "fly" or interact with the company need to be checked. . Organisations need to welcome everyone in from partners to customers and hope they are friends, not foes. The key word is now "deperimeterisation". But opening up the perimeter means organisations require knowledge of identities through trust and confidence. The link for this article located at ComputerWeekly.co.uk is no longer available. . Entities need to evolve alongside fresh security paradigms, welcoming deperimeterisation and placing trust in identities.. Information Management, Security Frameworks, Digital Identity, Trust Relationships. . Benjamin D. Thomas
Nov 24, 2005
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!