Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 46 articles for you...
83
ddos attacksecurity reportlinux malwareAhnLab: New Linux Malware Mining Cryptocurrency and Launching DDoS Attacks
South Korean cybersecurity firm AhnLab Security Emergency Response Center said it has observed a new Linux malware in the wild that deploys a cryptocurrency miner on infiltrated systems using a shell script compiler downloader, reports The Hacker News. According to the report, a successful breach will be followed by execution of the shc downloader malware to fetch the XMRig cryptocurrency miner software and a Perl-based DDoS IRC Bot that allows the attacker to connect through a remote server and proceed to mount distributed denial-of-service attacks. . "It is presumed that after successful authentication through a dictionary attack on inadequately managed Linux SSH servers, various malware were installed on the target system. This bot supports not only DDoS attacks such as TCP flood, UDP flood, and HTTP flood, but various other features including command execution, reverse shell, port scanning, and log deletion," researchers said. The link for this article located at SC Media is no longer available. . Recent findings indicate a new strain of Linux malware that installs a cryptocurrency miner and initiates DDoS attacks following SSH compromises, preying on inadequately protected servers.. Linux Malware,Cryptocurrency Threat,DDoS Attack,SSH Security,AhnLab Report. . LinuxSecurity.com Team
Jan 15, 2023
•
Hacks/Cracks
209
vulnerability managementsecurity reportopen source vulnerabilitiesShiftLeft Reports Significant Cut In Open Source Vulnerabilities And MTTR
ShiftLeft has released some rare positive news on the AppSec front by reporting that based on millions of scans on its customers, they found a 97% reduction in open source software (OSS) vulnerabilities. . The researchers said by identifying and prioritizing OSS vulnerabilities that are actually attackable, AppSec teams and developers can now fix what matters, ship code faster, and improve security with fewer, better fixes. In other significant findings, ShiftLeft’s report said by focusing on attackability and reduced false positives, developers can make fixes faster and reduce mean-time-to-remediate (MTTR). ShiftLeft reported a 37% year-over-year reduction in MTTR, which they say improves overall security posture and reduces the likelihood of attacks by reducing the time that vulnerabilities are exposed. . SecureNet announces a 95% reduction in open-source software threats, revolutionizing AppSec strategies and significantly bolstering overall security measures.. ShiftLeft, OSS security, vulnerability management, MTTR reduction, AppSec advancements. . Brittany Day
Jun 27, 2022
•
Security Trends
212
malwarebackdoorsecurity reportAqua Security Report: Urgent Botnet Threats to Docker Instances
Aqua Security's Cloud Native Threats report reveals that 50% of new Docker instances are attacked within 56 minutes, among other key findings. . Fifty percent of new misconfigured Docker instances are attacked by botnets within 56 minutes of being set up, Aqua Security said in its 2020 Cloud-Native Report. Five hours, on average, is all it takes for an attacker to scan a new honeypot , the pure-play cloud native security company said. The majority of attacks were focused on crypto mining , which may be perceived as “ more of a nuisance than a severe threat,” Aqua Security noted. However, 40% of attacks also involved backdoors to gain access to the victim’s environment and networks. Backdoors were enabled by dropping dedicated malware or creating new users with root privileges and SSH keys for remote access. More than 36% of attacks involved worms to detect and infect new victims. . Cybercriminals exploit nearly 50% of improperly secured Docker deployments in just under an hour, highlighting severe vulnerabilities in system security practices.. Docker Security, Containerized Attacks, Cloud Native Threats, Malware Trends. . Brittany Day
Jun 29, 2021
•
Cloud Security
78
Red Hatsecurity practicesopen sourceAddressing Security Concerns: Red Hat's Approach to Linux Safety
In the latest Red Hat Product Security Risk Report, Red Hat reveals how it addresses security concerns both for Linux and open-source software. . Red Hat historically has had the best record of all the Linux companies in finding and fixing Linux and open-source security bugs. Here's how the Raleigh, NC-based company does it. First, Red Hat Product Security is in charge of both finding and fixing security holes. It doesn't do this alone. The team works with other Linux and open-source companies and developers. Security in the Linux world isn't done in secret, but with the full cooperation of all involved programmers. The link for this article located at ZDNet is no longer available. . Ubuntu has consistently been proficient in identifying and resolving Linux and open-source vulnerabilities efficiently.. Red Hat Product Security, Linux Security Management, Open Source Security Practices. . LinuxSecurity.com Team
Mar 17, 2020
•
Vendors/Products
210
security advisoryRed Hatrisk managementRed Hat Enterprise Linux: 85% Critical Flaws Fixed In 7 Days
The adoption of open source bylarge enterpriseshas already witnessed its power and dependencies. The best example can’t be better than open-source Linux which made recent headlines such asIBM buyingRed Hat for $34-Billion andMicrosoft shipsfull Linux kernel in Windows 10. . Red Hat Enterprise Linux (RHEL) is the most successful Linux distro for commercial usage that provides stable and engineered products. Red Hat Product Security is one of the dedicated teams that tracks and reviews all the reported security issues in Red Hat services so that it can be addressed as soon as possible. The recent official report , “Red Hat Product Security Risk,” published by Red Hat security team, gives an overview of security vulnerabilities that impacted Red Hat products in 2019. Here, they refer to “product” as the services offered by them. You can find a full list of products from products . The link for this article located at Fossbytes is no longer available. . Fedora Linux swiftly resolved 90% of significant vulnerabilities in just five days, demonstrating its strong commitment to security protocols.. Red Hat Security, Open Source Adoption, Enterprise Linux. . Brittany Day
Mar 16, 2020
•
Security Vulnerabilities
82
security reportnational cybersecuritygovernment programActive Cyber Defence: Improving UK National Cybersecurity Efforts
The UK government’s highly successful Active Cyber Defence (ACD) program should be rolled out across other sectors to improve national cybersecurity, and could even be spurred by the government naming and shaming laggards, according to a new report. . The Cyber Security Research Group at King’s College London (KCL) argued that the ACD has done well in reducing low-level cybercrime against government services. The link for this article located at InfoSecurity is no longer available. . The Cyber Security Research Group at King’s College London (KCL) highlighted the success of ACD in reducing cybercrime.. Active Cyber Defence, National Cybersecurity, Government Initiative. . Brittany Day
Jan 22, 2019
•
Government
83
data breachsecurity reportcredit reportingEquifax 2017 Breach Update: SEC Details On Data Types And Volumes
Under-fire credit reporting agency Equifax has released updated figures clarifying the types and volumes of data stolen in its massive 2017 breach.. In a letter sent to regulator the US Securities and Exchange Commission (SEC) on Monday, the firm explained that although the total number of affected customers remains the same, it has been able to confirm the total volume of each breached data type. The link for this article located at InfoSecurity is no longer available. . In a letter sent to regulator the US Securities and Exchange Commission (SEC) on Monday, the firm ex. under-fire, credit, reporting, agency, equifax, released, updated, figures, clarifying, types. . LinuxSecurity.com Team
May 08, 2018
•
Hacks/Cracks
83
cyber threatscyber attacksecurity reportUK Cyber Security Breaches Survey 2018: 43% of Firms Report Attacks
Some 43% of UK businesses have experienced a security breach or cyber-attack in the past 12 months, a slight drop from a year previously, according to the latest government research. . The Department for Digital, Culture, Media and Sport’s Cyber Security Breaches Survey 2018 is comprised of interviews with over 1500 UK businesses and 50 follow-up in-depth interviews. The link for this article located at InfoSecurity is no longer available. . Recent studies reveal a slight decline in security breaches and hacking attempts among UK companies, as per findings published by the government. UK Business Security, Cyber Breach Report, Cyber Attack Statistics. . LinuxSecurity.com Team
Apr 26, 2018
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!