Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 15 articles for you...
209
security practicessystem hardeningLinux administrationThe Essential Reasons for Keeping SELinux Active for Optimal Security
Too many admins disable SELinux or set it to Permissive on their data center systems, as opposed to spending the necessary time to make the projects they're working on work with SELinux. Jack Wallen warns that admins are playing with fire by shrugging off SELinux, leaving their OSes weakened and susceptible to attacks. . Given the kerfuffle that has been CentOS lately, and the number of inevitable forks that will rise out of the ashes, there will probably be a large percentage of admins migrating to, or finally deploying, a Linux distribution based on Red Hat Enterprise Linux in some form or fashion. It may be Rocky Linux or AlmaLinux . It may be that you stick with CentOS Stream , or even purchase a license for Red Hat Enterprise Linux . If you're a non-profit or another eligible organization, you might qualify for RHEL for Open Source Infrastructure . No matter which route you take, you'll be using a solid Linux distribution with serious security systems in place. However... It's such a powerful word, "however." It stops all natural flow of the narrative to make you wonder just what comes next. You wait, and you wait, and you wait. Until the inevitable: SELinux. . Numerous administrators opt to deactivate SELinux or configure it in Permissive mode, jeopardizing overall system security. Discover the reasons this approach needs to change.. SELinux Management,System Security,Linux Best Practices,Admin Recommendations,Data Center Security. . Brittany Day
Mar 03, 2021
•
Security Trends
81
security policiessecure communicationmessaging solutionsExamining Security Protocols for Messaging Applications and Services
One of EFF’s strengths is that we bring together technologists, lawyers, activists, and policy wonks. And we’ve been around long enough to know that while good technology is necessary for success, it is rarely sufficient. Good policy and people who will adhere to it are also crucial. . People write and maintain code, people run the servers that messaging platforms depend on, and people interface with governments and respond to pressure from them. We could never get on board with a tool—even one that made solid technical choices—unless it were developed and had its infrastructure maintained by a trustworthy group with a history of responsible stewardship of the tool. . Effective regulations and accountable management are essential for the success of secure communication platforms amidst a challenging environment.. Secure Messengers, Policy Considerations, Technologist Collaboration. . LinuxSecurity.com Team
Apr 02, 2018
•
Privacy
82
data collectionNSAintelligence analysisNSA Data Collection's Role in Preventing Future Terror Attacks
The Obama administration has framed its defense of the controversial bulk collection of all American phone records as necessary to prevent a future 9/11.. During a House Intelligence Committee hearing on June 18, NSA director Gen. Keith Alexander said, "Let me start by saying that I would much rather be here today debating this point than trying to explain how we failed to prevent another 9/11." The link for this article located at CNN Security is no longer available. . Delving into the debates surrounding the NSA's extensive collection of phone records, its impact on national security, and its effectiveness in preventing incidents akin to 9/11.. NSASurveillance,MassDataCollection,TerrorismPrevention,InformationSecurity. . Alex
Dec 31, 2013
•
Government
79
risk managementdata protectionIT securityNavigating Security From Compliance Pressures And Missteps
Compliance pressures often push companies to make security improvements they wouldn't have tackled otherwise. More budget goes toward technology needed to protect customer data. New policies are created to rein in what employees do online with company machines. But there's a dark side to this story.. In the mad rush to comply -- whether the stick takes the shape of PCI DSS or the Red Flags Rule -- companies sometimes make decisions that weaken their security. Poorly chosen and deployed IT security technology is perhaps the best example; for more on that, see " How to Make Things Worse With IT Security Technology. The link for this article located at Network World is no longer available. . Regulatory demands can frequently cause organizations to overlook crucial security measures, jeopardizing their comprehensive safety and trustworthiness.. Compliance Measures, Security Policies, Risk Factors. . LinuxSecurity.com Team
Feb 24, 2010
•
Security Projects
81
user privacysecurity analysissecurity policiesBruce Schneier Discusses Misguided File-Sharing Law Efforts
Leading security expert Bruce Schneier was in London this week on a whirlwind lecture tour. ZDNet UK caught up with the ex-NSA man, who is now BT's chief security technology officer, at lectures in parliament and at University College London.. Schneier talked to ZDNet UK about his views on behavioural advertising, the efforts of various governments to tackle unlawful file-sharing, cyber-warfare and vendor lock-in. Q: The UK government is currently trying to pass the Digital Economy Bill, which includes provisions to penalise unlawful file-sharing. Is this technically feasible? A: The problem with a lot of these measures is that they only affect the average user. Professionals, hackers, clever people can get around them. No, I don't think this is technically feasible. The ones they don't care about, the average user, are the ones they are going to stop, and the detection mechanisms are sloppy. There are so many examples of the industry getting it wrong. The link for this article located at ZDNet UK is no longer available. . Schneier talked to ZDNet UK about his views on behavioural advertising, the efforts of various gover. leading, security, expert, bruce, schneier, london, whirlwind, lecture, zdnet. . LinuxSecurity.com Team
Dec 09, 2009
•
Privacy
82
network securitycybercrimesecurity policiesExploring Cybercrime Legislation: New Laws Affecting Hackers and Security
Everyone is in favour of sending hackers to prison for longer, but technology commentator Bill Thompson wonders if our MPs are competent to make good cyber-laws. If all goes to plan and the fuss over ID cards and school governance does not derail the parliamentary timetable, then we will soon have a new Police and Justice Act. . It makes many changes to the criminal law, but anyone considering writing a virus, hacking a bank system, launching a phishing or denial of service attack or installing some of the dodgier tools that can be used to 'test' network security should pay particular attention to clauses 33 to 36.. It makes many changes to the criminal law, but anyone considering writing a virus, hacking a bank sy. everyone, favour, sending, hackers, prison, longer, technology, commentator, thomp. . Brittany Day
Mar 16, 2006
•
Government
81
privacy rightssecurity policiesiris recognitionJohn Daugman On Privacy Rights Versus Government Security Policies
John Daugman, Cambridge-based pioneer of iris recognition told an audience of sixty security professionals, lawyers, and privacy advocates last night: “it is Orwellian to base a political campaign on disinformation. But he re-stated his main objection “to a creeping communitarianism – where the common good, as defined by the government takes precedence over the privacy rights of the individual The link for this article located at InfoSecurity-Magazine is no longer available. . The debate on privacy rights intensifies with government security measures. John Daugman emphasizes that national security shouldn't compromise personal privacy rights.. Iris Recognition, Privacy Protection, Security Measures, Communitarianism. . LinuxSecurity.com Team
Dec 02, 2005
•
Privacy
83
cyber threatssecurity challengessecurity policiesUnderstanding Linux Security Issues Amid Rising Cyber Threats
A report from British security firm mi2g last week blasted Linux system administrators for their failure to master the operating system's intricacies. It's important, though, to read between the lines before placing the blame solely on IT. As mi2g itself noted, the often chaotic growth of Linux has resulted in a tangle of procedures and a variety of security upgrade policies that make the administrators' job tougher. . . .. A report from British security firm mi2g last week blasted Linux system administrators for their failure to master the operating system's intricacies. It's important, though, to read between the lines before placing the blame solely on IT. As mi2g itself noted, the often chaotic growth of Linux has resulted in a tangle of procedures and a variety of security upgrade policies that make the administrators' job tougher. That growth has made Linux a more appealing target for hackers. But it will also generate more and better security products, and a deeper IT understanding of Linux security needs, policies, and vulnerabilities. A survey taken at the Computer Security Institute's annual conference calls for the same kind of between-the-lines consideration. Most of the 350 IT executives participating in the survey considered their networks to be more secure today than they were a year ago. Yet the same group reported sharp increases in the numbers of attacks their networks are experiencing. Is there a disconnect at work here? Is the increased sense of security delusional? Or is something else going on? The link for this article located at securitypipeline.com is no longer available. . This analysis uncovers the contradiction surrounding the efficacy of Linux administration security in the face of increasing cyber threats.. Linux Administration, Security Insights, IT Challenges, Cyber Resilience. . LinuxSecurity.com Team
Nov 18, 2004
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!