Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 17 articles for you...
81
data protectionUbuntusecurity practice13 Key Strategies To Improve Security And Privacy On Ubuntu
Learn 13 Linux security best practices you can follow to avoid privacy risks and data leaks. . Everybody should be concerned about their privacy and security in this day and age. It is a common misconception that if you are running Linux you do not need to concern yourselves with privacy and security issues. Every operating system has risks and vulnerabilities that can be exploited and leave you exposed. . Uncover vital Ubuntu Linux privacy and security configurations to safeguard your information and maintain confidentiality effectively.. Ubuntu Security, Linux Privacy, Security Best Practices. . LinuxSecurity.com Team
Jun 28, 2021
•
Privacy
79
authenticationsecurity practicepassword hashingExploring Yescrypt: Innovative KDF For Enhanced Password Security
yescrypt is a password-based key derivation function (KDF) and password hashing scheme. It builds upon Colin Percival's scrypt and includes classic scrypt, a minor extension of scrypt known as YESCRYPT_WORM (named that for "write once, read [potentially] many [times]", which is how scrypt works), and the full native yescrypt also known as YESCRYPT_RW (for "read-write"). . Like it or not, password authentication remains relevant (including as one of several authentication factors), password hash database leaks happen, the leaks are not always detected and fully dealt with right away, and even once they are many users' same or similar passwords reused elsewhere remain exposed. To mitigate these risks (as well as those present in other scenarios where password-based key derivation or password hashing is relevant), computationally expensive (bcrypt, PBKDF2, etc.) and more recently also memory-hard (scrypt, Argon2, etc.) password hashing schemes have been introduced.. Password security continues to be crucial, as yescrypt's key derivation function and hashing approach help reduce vulnerabilities from password breaches.. Yescrypt, Password-Based, Key Derivation, Hashing Solutions. . LinuxSecurity.com Team
Mar 16, 2018
•
Security Projects
79
risk managementdata protectioninformation securityStartup Security Risks and Best Practices for Data Protection
For startups, user growth, product growth, virality, marketing usually goes on the top of their priority list. As part of product planning cycles, embedding information security into their product/service is the last concern for most startups.. Which is deeply ignored here? Information and data security. Often you see devops engineers, systems engineers, infrastructure engineers or system administrators wear the security hat in these startups and performs some of the small security fixes or patches. Even though they can perform research on the procedures to apply patches, harden databases, or implement remediation as a result of the industry breaches, they might not take every decision or option from security perspective. The link for this article located at TechWorld is no longer available. . Emerging businesses frequently overlook essential information and cybersecurity protocols while scaling operations and developing their product strategies.. Startup Security, Data Protection, Security Practices, Growth Phases, Risk Management. . LinuxSecurity.com Team
Nov 11, 2014
•
Security Projects
77
operating systemSELinuxsecurity practiceExploring Red Hat's Approach To Linux Security Management
How does Red Hat go about building and developing a secure Linux operating system? That question was asked and answered at the Red Hat Summit this week by Josh Bressers, who heads the Red Hat Product Security Team.. Bressers explained that the security process involves both manual and automated activities for quality assurance. Linux is further reinforced with what Dan Walsh, senior principal software engineer at Red Hat called a "silver bullet" for Linux security -- SELinux. The link for this article located at eSecurity Planet is no longer available. . Bressers explained that the security process involves both manual and automated activities for quali. about, building, developing, secure, linux, operating, system, question. . LinuxSecurity.com Team
Jun 17, 2013
•
Server Security
72
network protectionsecurity practicethreat assessmentQuestioning Firewalls' Place in Modern Network Security
Once, firewalls were useful for certain types of attacks. Now they're more trouble than they're worth -- and create a false sense of security into the bargain . Firewalls need to go away. I'm just saying what we all already know. Firewalls have always been problematic, and today there is almost no reason to have one. Computer firewalls have been with us since the 1980s. Even early on it was pretty clear that they didn't really work; if they did, we would have defeated malicious hackers and malware a long time ago. But at least back in the day there was a decent reason to need them. The link for this article located at InfoWorld is no longer available. . Firewalls need to go away. I'm just saying what we all already know. Firewalls have always been prob. they're, firewalls, useful, certain, types, attacks, trouble. . Dave Wreski
May 15, 2012
•
Firewalls
79
privacy issuesecurity practiceuser awarenessCall For Security By Default Policies In Major Companies
In this op-ed, a cybersecurity researcher argues that major companies are leaving customers at risk by not enforcing security by default. The opinions expressed here do not necessarily represent the opinions of Ars Technica. . Major social networks, e-mail providers, and communications companies offer products with insecure default settings, needlessly exposing their customers to hacking, identity theft, and government surveillance. Some firms offer security options that can be used to protect against common attacks; however, they are frequently so hidden in obscure configuration menus as to be invisible to the average user. Consequently, most consumers don't know about these options, and so they neither seek them out nor enable them. The article located at arsTechnica is no longer available. . Leading corporations jeopardize user protection by utilizing vulnerable initial settings, necessitating a transition to inherent security protocols.. Security By Default, Cybersecurity Strategies, Privacy Issues. . LinuxSecurity.com Team
Aug 18, 2011
•
Security Projects
77
data backupdata losssecurity practiceEssential Strategies for Data Protection on World Backup Day
Hello, world! Today it's your Backup Day. World Backup Day is a new idea promoted by a small team of Redditors, and it's a good idea. You can never be too careful when it comes to backing up.. By the way, this is about your data, and not calling your buddies over for help in a hostile situation, which is not really my area of expertise. So let's talk backups! Basically it means putting your data in multiple places so that if something happens to one place (let's say you forget your laptop on the top of your car and subsequently back over it), that important PowerPoint presentation you've been working on isn't lost. The link for this article located at CNET is no longer available. . By the way, this is about your data, and not calling your buddies over for help in a hostile situati. world, backup, hello, today, promoted, small. . LinuxSecurity.com Team
Apr 01, 2011
•
Server Security
67
cyber threatsencryptionsecurity practiceUnderstanding AES Encryption's Role in Security Practices
Nearly nine years after the publication of FIPS 197, AES encryption remains the de facto standard today for symmetric encryption, and brute-force attacks remain infeasible, at least for the foreseeable future. To date, most attacks methods have focused on weaknesses or characteristics in specific implementations, called "side-channel attacks," not on the algorithm itself.. Threats to computer and network security Planning for the next peak season? Ensure your website is fast, secure and available 24/7. Click here to learn how. increase with each passing day and come from a growing number of sources. No computer or network is immune from attack. A recent concern is the susceptibility of the power grid and other national infrastructure to a systematic, organized attack on the United States from other nations or terrorist organizations. Encryption, or the ability to store and transmit information in a form that is unreadable to anyone other than intended persons, is a critical element of our defense to these attacks. Indeed, man has spent thousands of years in the quest for strong encryption algorithms. The link for this article located at Tech News World is no longer available. . Threats to computer and network security Planning for the next peak season? Ensure your website is f. nearly, years, publication, encryption, remains, facto, standard. . LinuxSecurity.com Team
Jul 19, 2010
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!