Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 0 articles for you...
77
security toolsthreat detectionLinux serverTop 10 Tools for Scanning Linux Servers Against Threats
Worried that your Linux server might be infected with malware or rootkits? Here's 10 great security tools you can use to scan your Linux server for malware and security flaws. . Linux is downright one of the most popular and secure operating systems for large-scale servers. Despite its widespread usage, it remains vulnerable to cyberattacks. Hackers target servers to either shut them down or steal valuable information. There is a pressing need to develop counter-hacking methods to brace security breaches and malware attacks. This is possible by hiring cybersecurity professionals; unfortunately, this can prove to be a costly affair. The next best solution is to install scanning tools that fit like a hand in glove for your Linux systems. . Unix-like systems hold a prominent position among server operating systems, yet they still face security risks. Uncover vital assessment utilities.. Linux Malware Scanner, Security Tools Linux, Malware Detection Tools, Cybersecurity Tools, Threat Assessment. . LinuxSecurity.com Team
Jul 27, 2021
•
Server Security
79
application protectionsecurity scanningopen-source toolsTop Open-Source Tools For Securing Container Environments
The use of containers is becoming increasingly popular, and container security is more critical than ever. Luckily, there are various tools that can help keep your business safe! This article covers some popular open-source tools that your DevOps team can use to secure your container environment. . As the use of containers is becoming more popular and streamlined, the security aspects related to containers have also become more critical for businesses. Containerization has particular structural and operational elements that need special attention. The architectural differences like a shared kernel for containers demand a different security approach altogether, in comparison to traditional security approaches. This makes it very important to understand and perform container-specific security scanning at the earlier stages of the build process. To meet these dynamic requirements of the DevOps teams , several open-source security tools are available in the market. This article covers some popular open-source security tools your DevOps teams can use to ensure the security of your container environment. The link for this article located at TechGenix is no longer available. . Delve into crucial open-source solutions that strengthen container security and safeguard your cloud-based applications efficiently.. Open Source Tools, Container Security, DevOps Practices, Application Protection. . LinuxSecurity.com Team
Mar 19, 2020
•
Security Projects
79
network monitoringthreat detectionservice detectionDiscover Non-Standard Ports To Detect Compromised Services
Anyone who has used Linux long enough will look at numbers such as 22 and 80 in a totally different light than everyone else. Default port numbers are expected to be hammered with tons of packets day to day, from legitimate user requests to probes sent by nmap scans. Changing services such as SSH and FTP to non-default numbers are not only a tactic for securing your server - they're a tactic for malicious users to hide these services as backdoors once a system is compromised. Read on to see how scanning tools such as Passive Vulnerability Scanner and Nessus can be used to scan for these "off port" services. . If you are attempting to perform network security monitoring in a large, unmanaged environment that has "poor" security, you are most likely dealing with botnets, phishing attempts, worms and Trojans. Many of these threats install some sort of FTP, SSH or Web server as a backdoor or drop point on a port other than the typical default port. Discovering these on your network may help you find compromised servers, or even administrators who are trying to bypass firewall rules. This blog entry discusses how to find these "off port" services with the Passive Vulnerability Scanner (PVS), Nessus scanner and through log analysis. The link for this article located at Tenable Network Security is no longer available. . Effectively detecting non-standard ports in network security requires techniques such as traffic analysis, port scanning, and using EDR solutions for thorough monitoring. Port Monitoring, Service Detection, Network Security Techniques. . LinuxSecurity.com Team
Jul 10, 2007
•
Security Projects
79
open source projectJava programmingsecurity scanningFree Java Application Bug Scan Offered by Fortify and FindBugs
Code auditing firm Fortify Software announced on Monday that the company is teaming up with quality-testing project FindBugs to offer a free scanning service to any Java programmer aimed at automatically detecting quality defects and security bugs. The project, dubbed Java Open Review, will allow any project written in Java to be submitted by a contributor to be scanned using both Fortify's auditing tool and the FindBugs engine. The two organizations have already scanned ten open-source projects written in Java, including the Azureus Bittorrent application, the Zimbra Web e-mail server, and the Apache Tomcat Java server. . The project has gotten support from both Sun Microsystems, the creator of Java, and Google, a heavy user of the programming language. The link for this article located at Security Focus is no longer available. . The project has gotten support from both Sun Microsystems, the creator of Java, and Google, a heavy . auditing, fortify, software, announced, monday, company, teaming, quality-. . LinuxSecurity.com Team
Dec 13, 2006
•
Security Projects
74
network securitypatch managementvulnerability assessmentGFI LANguard NSS Review: Features and Scanning Benefits
This is a review of the new release of LANguard Network Security Scanner (GFI LANguard NSS) from GFI. NSS will scan computers for known vulnerabilities and common misconfigurations and other potential security issues. It produces reports that can be used to assist in the tracking and mitigation of security issues that have been identified. Furthermore, NSS provides patch management capabilities that allow you to centrally download and push out patches to systems with identified vulnerabilities. . Some key features of NSS are: The identification of rogue services and open TCP and UDP ports. Detects known CGI, DNS, FTP, Mail, RPC and other vulnerabilities. Detects Open shares and lists who has access to these shares together with their permissions. Enumeration of users, services, etc. A complete list of features can be found in the product manual. My intention with this review is to see just how easily one can begin using this product – without reading the manual. This is the point-and-click world, and frankly, if you can't just pick up a product and start using it, then the interface probably needs some improvement. The link for this article located at netsecurity.org is no longer available. . GFI LANguard NSS enhances network security with features like security scans for vulnerabilities, automated patch management, and insightful configuration reports. GFI LANguard NSS, Network Security Scanner, Patch Management Tool, Security Tool. . Brittany Day
Jul 21, 2005
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!