Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 3 articles for you...
212
data exposurecloud securityopen source toolS3crets Scanner: Secure Your Public AWS S3 Buckets Today
A new open-source 'S3crets Scanner' scanner allows researchers and red-teamers to search for 'secrets' mistakenly stored in publicly exposed or company's Amazon AWS S3 storage buckets. . Amazon S3 (Simple Storage Service) is a cloud storage service commonly used by companies to store software, services, and data in containers known as buckets. Unfortunately, companies sometimes fail to properly secure their S3 buckets and thus publicly expose stored data to the Internet. . Dive into the innovative S3crets Scanner, a community-driven application designed to detect sensitive information hidden within publicly accessible AWS S3 repositories.. Open Source Tool,AWS S3 Scanning,Cloud Security Solutions,Data Exposure Prevention. . Brittany Day
Oct 30, 2022
•
Cloud Security
79
Ubuntuopen-sourcesecurity scannerInstall SpiderFoot Security Scanner on Ubuntu 20.04 for Enhanced Security
Learn how to install SpiderFoot - an excellent open-source security scanner - to analyze vulnerabilities and malicious functions on Ubuntu Linux servers and assist in your pentesting endeavors in this tutorial. . Spiderfoot is a free and open-source vulnerability testing tool that helps you to reduce attacks by hackers. It is used to analyze vulnerabilities and malicious functions on Linux servers. It is a cross-platform software tool that supports Linux and Windows machines and can be collaborated with GitHub. It is written in Python and uses SQLite as a database backend. It provides a web-based interface to perform penetration testing for more than one target simultaneously through a web browser. In this tutorial, we will show you how to install Spiderfoot on Ubuntu 20.04 server. . Set up SpiderFoot, the free-to-use vulnerability detection tool for scrutinizing security flaws on Ubuntu Linux systems. Boost your protection.. SpiderFoot Installation, Vulnerability Testing, Open-Source Scanner, Ubuntu Security. . LinuxSecurity.com Team
Apr 02, 2021
•
Security Projects
78
XSSweb applicationvulnerability assessmentFiring Range Tool: Test Web App Security Scanners Effectively
Google today released to open source tool called Firing Range, which is designed as a test bed for Web application security scanners that provides coverage for a wide variety of cross-site scripting (XSS) and other vulnerabilities on a massive scale. - See more at: . According to Google security engineer Claudio Criscione, 70 percent of the bugs in Google The link for this article located at ThreatPost is no longer available. . Microsoft unveils Code Lab, a community-driven platform designed for validating security tools against CSRF and additional exploit categories.. Web Application Security, Open Source Testing, XSS Testing, Vulnerability Assessment. . LinuxSecurity.com Team
Nov 21, 2014
•
Vendors/Products
79
debiansystem hardeningubuntuImprove System Security with Buck-Security for Ubuntu and Debian
Buck-Security is a security scanner for Debian and Ubuntu Linux. It helps you to harden your system by running some important security checks. For example, it finds world-writable files and directories, setuid and setgid programs, superuser accounts, and installed attack tool packages. . It also checks your umask and checks if the sticky bit is set for /tmp, among other checks.It was designed for Debian and Ubuntu servers, but can be useful for any Linux system. By now the following tests are implemented: Searching for worldwriteable files Searching for worldwriteable directories Searching for programs where the setuid is set Searching for programs where the setgid is set Checking your umask Checking if the sticky-bit is set for /tmp Searching for superusers Checking firewall policies Checking if sshd is secured Creating and checking checksums of system programs Searching for installed attack tools packages The link for this article located at Ubuntu Geek is no longer available. . It also checks your umask and checks if the sticky bit is set for /tmp, among other checks.It was de. buck-security, security, scanner, debian, ubuntu, linux, helps, harden, system. . LinuxSecurity.com Team
Apr 05, 2010
•
Security Projects
74
open-sourcenetwork assessmentsecurity scannerExploring OpenVAS for Network Vulnerability Assessments
As important as security is, remaining current with every development is hard, and evaluating possible vulnerabilities across a network can be quite a chore. You need a way to both automate tests and make sure you're running the most appropriate and up-to-date tests. Open Vulnerability Assessment System (OpenVAS) is a network security scanner that includes a central server and a graphical front end. Do you want to run network vulnerability tests (NVTs) to identify vulnerabilities in your network? Check out this open source client/server application which provides a graphical front-end for running automated NVTs written in Nessus Attack Scripting Language (NASL). . The link for this article located at linux.com is no longer available. . Explore how OpenVAS aids in automated network vulnerability testing to improve your security evaluations.. important, security, remaining, current, every, development, evaluating, possib. . Brittany Day
Oct 13, 2008
•
Network Security
78
open sourcenessusproprietary licensingNessus Scanner Changes Licensing: Impact on Community and Users
The source code of one of the world's most popular free security tools will no longer be available to all, its creator has announced, saying the software's open-source license was fueling competition. . Renaud Deraison, the primary author of the Nessus vulnerability scanner, broke the news in a message to the software's e-mail list Wednesday. "Nessus 3 will be available free of charge...but will not be released under the GPL," or General Public License, Deraison wrote. Nessus, which Deraison says is used by 75,000 organizations worldwide, scans networks for vulnerabilities. The developer, who has been working on the product since at least 1998, said commercial pressures facing Tenable Network Security, the company he started in 2002 around Nessus, was forcing him to stop making the software's source code available. "A number of companies are using the source code against us, by selling or renting appliances, thus exploiting a loophole in the GPL," he wrote in a later e-mail, justifying his decision. "So in that regard, we have been fueling our competition, and we want to put an end to that. Nessus 3 contains an improved engine, and we don't want our competition to claim to have improved 'their' scanner.". Renaud Deraison, the primary author of the Nessus vulnerability scanner, broke the news in a message. source, world's, popular, security, tools, longer. . LinuxSecurity.com Team
Oct 07, 2005
•
Vendors/Products
78
MySQLapplication securityvulnerability assessmentAppDetective 3.2: MySQL and Web Application Security Scanner
Application Security Inc. is rolling out a security scanner for MySQL, the open-source database from MySQL AB, and for Web applications. AppDetective 3.2 for Web Applications and AppDetective 3.2 for MySQL are network-based vulnerability assessment scanners that locate and assess . . . . Application Security Inc. is rolling out a security scanner for MySQL, the open-source database from MySQL AB, and for Web applications. AppDetective 3.2 for Web Applications and AppDetective 3.2 for MySQL are network-based vulnerability assessment scanners that locate and assess the security of network database applications. Both Web applications and back-end databases can provide an easy way for intruders to exploit application vulnerabilities. To combat that potential, AppDetective can now check Web applications for susceptibility to XSS (Cross Site Scripting), SQL Injection and Parameter Manipulation attacks, among other holes. The link for this article located at eWeek is no longer available. . SecureTech Solutions launches a robust scanner dedicated to PostgreSQL and online applications, aiming to bolster defenses against critical vulnerabilities.. MySQL Security Scanner, Web Application Security, Vulnerability Assessment, Application Security Solutions, XSS Prevention. . LinuxSecurity.com Team
Jun 20, 2003
•
Vendors/Products
74
network assessmentsecurity scannerLinux networkExploring Security Scanners' Role in Linux Network Protection
This paper discusses the differnt types of security scanners available for Linux. "A scanner is a program that automatically detects security weaknesses in a remote or localhost.". Scanners are important to Internet security because they reveal weaknesses in the . . .. This paper discusses the differnt types of security scanners available for Linux. "A scanner is a program that automatically detects security weaknesses in a remote or localhost.". Scanners are important to Internet security because they reveal weaknesses in the network. System administrators can strengthen the security of networks by scanning their own networks. The link for this article located at Linux.com --Â Â is no longer available. . This paper discusses the differnt types of security scanners available for Linux. 'A scanner is a pr. paper, discusses, differnt, types, security, scanners, linux, scanner. . Anthony Pell
May 16, 2000
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!