Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 2 articles for you...
209
open sourcevulnerability managementsecurity processExamining the Security Issues Arising from Apache Log4j Misuse
Security is a process, not a product. We're going to be cleaning up Apache Log4j security problems for months to come, but the real problem isn't that it was open-source software. It's how we track and use open-source code. . When security vulnerabilities were found in the extremely popular open-source Apache Log4j logging library , we knew we were in trouble. What we didn't know was just how much trouble we were in. We know now. Just ask the Belgian defence ministry . In this ongoing security disaster, many people blame open source for all our troubles. In the Financial Times (FT), Richard Waters, the newspaper's west coast editor, wrung his hands, saying it's a "little alarming to discover that, more than two decades into the open-source era, glaring security holes sometimes surprise even the experts ." . Investigating the persistent security issues surrounding open-source software and the exploitation of Apache Log4j vulnerabilities.. Open Source Security, Apache Log4j, Security Processes, Vulnerability Management. . Brittany Day
Jan 13, 2022
•
Security Trends
74
risk managementnetwork protectionIT securityExploring The Security Sector's Role In IT Risk Management
In Do We Really Need a Security Industry? Bruce Schneier writes: The primary reason the IT security industry exists is because IT products and services aren't naturally secure. If computers were already secure against viruses, there wouldn't be any need for antivirus products. If bad network traffic couldn't be used to attack computers, no one would bother buying a firewall. If there were no more buffer overflows, no one would have to buy products to protect against their effects. If the IT products we purchased were secure out of the box, we wouldn't have to spend billions every year making them secure. . Bruce is right if you confine yourself to thinking that "secure" is the same as "zero vulnerabilities." This is one-dimensional thinking and correct as long as you stay within that one dimension. As I defined in The Tao of Network Security Monitoring, security is the process of maintaining an acceptable level of risk. I defined (using the common method) risk as the product of threat, vulnerability, and asset value, or R = T X V X A. The link for this article located at TaoSecurity is no longer available. . Schneier questions the assumption that security means eliminating all risks in technology, advocating for a more nuanced perspective.. Security Industry, Risk Management, Network Protection, Cyber Defense. . Brittany Day
May 04, 2007
•
Network Security
77
access managementcorporate securityIT administrationBest Practices For Terminating A Systems Administrator Securely
Perhaps one of the most challenging situations in an IT organisation is to let a systems administrator go. This individual has the proverbial keys to the kingdom as a trusted member of your corporate team. If the time comes to part . . . . Perhaps one of the most challenging situations in an IT organisation is to let a systems administrator go. This individual has the proverbial keys to the kingdom as a trusted member of your corporate team. If the time comes to part ways, it's imperative to do a thorough job of removing the employee's physical and logical access to your network and facilities. The first step is to consult with the appropriate legal, human resources and management personnel to ensure a proper basis for the termination or to work out the severance specifics for the layoff. Next you can zero in on the technical and security issues that need to be addressed. The goal is to complete the process with little or no disruption of business processes and to do it in a professional and complete manner. You need to eliminate the employee's access to corporate sites and assets, networks, systems and applications to prevent him from damaging company property and data. Accomplishing this requires inventory, planning, execution and monitoring. What follows are some guidelines for completing the four-step process. . Managing the intricate procedure of dismissing a network engineer while safeguarding data integrity and maintaining functional stability.. employeeTermination, accessManagement, ITSecurity. . LinuxSecurity.com Team
Dec 22, 2003
•
Server Security
77
network securitypatch managementsystem updatesOptimizing Patch Management Through Processes and Strategy
"We see people looking for a tool that will solve all their problems, but what you need is a process; it's not just about the tool," says Felicia Nicastro, senior network systems consultant for International Network Services, a consulting firm that . . . . "We see people looking for a tool that will solve all their problems, but what you need is a process; it's not just about the tool," says Felicia Nicastro, senior network systems consultant for International Network Services, a consulting firm that kicked off a patch management service in September. Nicastro says the biggest mistake companies make is leaving out the processes, such as diligent monitoring for new patches coupled with detailed evaluation, testing, deployment and validation that a team or individual manages. "This typically isn't a task for one person. It has to involve the security group, the operations group and the developers," she says. "So what also makes patching tough is a lack of resources." . Effective patching relies on a systematic methodology; discover key tactics for proficient update administration.. Patch Management, Security Processes, System Updates, Network Security, Patch Evaluation. . LinuxSecurity.com Team
Dec 10, 2003
•
Server Security
67
digital signaturekey managementsignature verificationSetting Up Digital Signatures And Verification Process In Java
To set up a digital signature in Java, you first need to set up a private key, usually by using keytool or the security API methods. Programmers often use the Java Certificate feature to securely verify public key authenticity. . . . . To set up a digital signature in Java, you first need to set up a private key, usually by using keytool or the security API methods. Programmers often use the Java Certificate feature to securely verify public key authenticity. After you have a public key, you generate a digital signature using the jarsigner tool or the API methods. Use the Signature class to sign the data by creating the signature object, initialize it for signing, processing the data, and then sign it. After it's signed, you export the objects into files for shipping to the receiver. Once the data is signed, you send the receiver the data and signature. You must supply the receiver with the public key corresponding to the private key you used to generate the signature. The receiver imports the public key then uses the key to verify integrity. The receiver can verify by grabbing the object, initializing it for verification, processing the data, and then comparing the signature. The link for this article located at EarthWeb is no longer available. . To set up a digital signature in Java, you first need to set up a private key, usually by using keyt. digital, signature, first, private, usually, using. . LinuxSecurity.com Team
Apr 09, 2001
•
Cryptography
81
cybersecuritydata integritye-commerceKey Considerations For Ensuring Your Organization's Data Safety
One of the fundamental questions that every organization is presented with on a day-to-day basis is, "Is my data safe?" It's a really good question because the consequences of not knowing can be detrimental to your company. I hate the term, . . . . One of the fundamental questions that every organization is presented with on a day-to-day basis is, "Is my data safe?" It's a really good question because the consequences of not knowing can be detrimental to your company. I hate the term, but the e-Commerce community is built on the integrity of its data, yet very few companies employ technologies that can directly answer the question. Most companies feel that they get "security" by putting a firewall in front of their web and mail servers. This really provides a false sense of security. "I closed the door to the house, therefore I have "security." We need to begin thinking of security as a process rather than an event. We will never have 100% security, so what do we do? The link for this article located at Enterprise Linux Today is no longer available. . One of the fundamental questions that every organization is presented with on a day-to-day basis is,. fundamental, questions, every, organization, presented, day-to-day, basis. . LinuxSecurity.com Team
Oct 04, 2000
•
Privacy
67
risk managementsecurity practicesorganizational securityBruce Schneier Insights on Managing Security Processes Effectively
Here's an excellent (as always) article by Bruce Schneier on the process of thinking about security. "Security is a process, not a product. Products provide some protection, but the only way to effectively do business in an insecure world . . .. Here's an excellent (as always) article by Bruce Schneier on the process of thinking about security. "Security is a process, not a product. Products provide some protection, but the only way to effectively do business in an insecure world is to put processes in place that recognize the inherent insecurity in the products. The trick is to reduce your risk of exposure regardless of the products or patches." It ends with a list of things to keep in mind when you're the one responsible for security in your organization.. Here's an excellent (as always) article by Bruce Schneier on the process of thinking about security.. here's, excellent, always), article, bruce, schneier, process, thinking, about, security. . LinuxSecurity.com Team
Apr 20, 2000
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!