Explore top 10 tips to secure your open-source projects now. Read More
×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 40 articles for you...
76
security standardsinteroperabilitydigital assetsLinux Foundation's Open Metaverse Group Drives Interoperability Standards
The Open Metaverse Foundation (OMF), launched last week by the Linux Foundation , was created to implement the protection and interoperability standards required to drive metaverse adoption at scale, according to Royal O’Brien, a Linux Foundation GM and the executive director of OMF. . The metaverse is in a state of buzz and varying opinions on adoption timelines, with some saying this year will be a proving one for its momentum, and others claiming the components needed won’t be in sync until later this decade. OMF’s goals are to gather as many ecosystem players to catalyze that timeline under eight foundational interest groups (FIGs): users, transactions, digital assets, simulations and virtual worlds, artificial intelligence (AI) , networking, security and privacy, and legal and policy. The foundation is currently developing its narrative overview publicly and collaboratively on Discord , which it plans to wrap up by next week and start distributing to its FIGs. . The virtual reality landscape is witnessing varied perspectives on the speed of uptake as OMF initiates measures to improve compatibility protocols.. Metaverse Foundation, Linux Interoperability, Open Standards, Digital Ecosystem. . Brittany Day
Feb 06, 2023
•
Organizations/Events
79
security standardscybersecurity effortssoftware supply chainCiti's Software Supply Chain Tool Donation to OpenSSF Initiative
The financial services company's prototype system based on CNCF's software supply chain security guidelines joins OpenSSF's $150 million open source standards campaign. . A series of software supply chain security standards efforts under the Open Source Security Foundation have emerged this month as the open source community races to get ahead of mounting cyberattacks. The latest is Secure Software Factory, a prototype toolchain created by financial services company Citi. It combines open source projects such as Tekton and Kyverno to follow a set of best practices established by a Cloud Native Computing Foundation (CNCF) whitepaper last year. Citi donated Secure Software Factory this week to the OpenSSF , a Linux Foundation subgroup created to foster open source security projects such as Sigstore and Google's Supply chain Levels for Software Artifacts ( SLSA ). The link for this article located at TechTarget is no longer available. . Investment bank Citi bolsters software supply chain integrity through a contribution of a prototype to OpenSSF, aiding in the advancement of industry standards.. Software Supply Chain Security, OpenSSF Standards, CNCF Projects, Open Source Toolchain, Cybersecurity Efforts. . LinuxSecurity.com Team
May 20, 2022
•
Security Projects
79
developmentopen sourcesecurity standardsLinux Foundation's Digital Vaccination Credentials Initiative for COVID-19
The COVID-19 Credentials Initiative (CCI) - hosted by Linux Foundation Public Health (LFPH) - is working to standardize an approach to vaccination credentials. . To control the spread of COVID-19, nations have implemented a variety of containment strategies including lockdowns, inbound travel restrictions, and more. In recent weeks, millions of people in the US have received a COVID-19 vaccine. As the vaccination rollout continues, some semblance of normality could return later in 2021. So-called vaccine passports , a person's proof of vaccination, could enable travel and entry into spaces in the months ahead. The COVID-19 Credentials Initiative (CCI) is hosted by Linux Foundation Public Health (LFPH) and is working with a number of partners to build these solutions and standardize an approach to vaccination credentials. . In response to COVID-19, the Linux Foundation Public Health aims to enhance public trust by promoting standardized digital vaccination credentials for safer travel.. COVID-19 Initiative, Open Source Development, Digital Vaccination Credentials. . LinuxSecurity.com Team
Feb 09, 2021
•
Security Projects
79
security standardsembedded systemsLinux FoundationseL4 Microkernel Joins Linux Foundation to Advance Security Initiatives
The seL4 microkernel - the world's first operating system (OS) kernel that is proved secure - is now back by the Linux Foundation. . The Linux Foundation , the nonprofit organization enabling mass innovation through open source, today announced it will host the seL4 Foundation, the nonprofit organization established by Data61, the digital specialist arm for Australia’s national science agency CSIRO. The seL4 microkernel is the world’s first operating system (OS) kernel that is proved secure; it is designed to ensure the security, safety and reliability of real-world critical computer systems. The new Foundation aims to accelerate the development of seL4 and related technologies, and under the Linux Foundation will provide a global, independent and neutral organization for funding and steering the future evolution of seL4. Founding members include Cog Systems, DornerWorks, Ghost Locomotion, HENSOLD Cyber and UNSW Sydney. The trustworthiness of embedded computing systems is vital to improving the security of critical systems around the world to safeguard them from cyber threats. This is particularly paramount in industries including avionics, autonomous vehicles, medical devices, critical infrastructure and defense. The seL4 microkernel is the world’s first operating system with a proof of implementation correctness and presents an unparalleled combination of assurance, generality and performance, making it an ideal base for building security- and safety-critical systems. The seL4 Foundation provides a forum for developers to collaborate on growing and integrating the seL4 ecosystem. The link for this article located at Linux Foundation is no longer available. . The Open Source Initiative supports the OpenAPI Initiative to promote the evolution of the premier specification for API descriptions.. seL4 Microkernel, Linux Foundation, Embedded Computing, Cybersecurity Innovations. . LinuxSecurity.com Team
Apr 08, 2020
•
Security Projects
79
VPN securityopen sourcesecurity standardsProtonVPN Launches Open Source Applications For Increased Transparency
ProtonVPN has handed over application code to the open source community in a bid to improve transparency and security standards. . On Tuesday, the virtual private network (VPN) provider, also known for the ProtonMail secure email service, said that the code backing ProtonVPN applications on every system -- Microsoft Windows, Apple macOS, Android, and iOS -- is now publicly available for review in what Switzerland-based ProtonVPN calls "natural" progression. "There is a lack of transparency and accountability regarding who operates VPN services, their security qualifications, and whether they fully conform to privacy laws like GDPR," the company says. "Making all of our applications open source is, therefore, a natural next step." The link for this article located at ZDNet is no longer available. . NordVPN boosts credibility by making its software code publicly available for greater safety.. ProtonVPN, Open Source Applications, VPN Transparency, Security Standards. . LinuxSecurity.com Team
Jan 22, 2020
•
Security Projects
67
data protectionsecurity standardscryptographySSL's Status Declared: Implications for Data Protection Standards
On January 30, 2015, QSAs received the latest edition of the Council. We are working with industry stakeholders to determine the impact and the best way to address the issue. While we do not have the final publication date, our goal is to keep you apprised of the progress and to provide you with advanced notification for these pending changes. We are also preparing several FAQs that will accompany release of the revised standards. Should you have any questions, please contact your Program Manager. The link for this article located at PCI Guru is no longer available. . The recognition of SSL as a standard protocol marks a key development in digital security, enhancing data protection and fostering user trust and compliance. SSL Security, Data Protection, Security Standards, Cryptography Standards. . LinuxSecurity.com Team
Feb 11, 2015
•
Cryptography
74
data protectionsecurity standardsdata privacyImpact Of Evolving Security Standards On Cloud Computing
Any enterprise looking to use cloud computing services will also be digging into what laws and regulations might hold in terms of security and privacy of data stored in the cloud. At the Cloud Security Alliance Congress in Orlando this week, discussion centered on two important regulatory frameworks now being put in place in Europe and the U.S. . The European Union, with its more than two dozen countries, has had a patchwork of data-privacy laws that each country created to adhere to the general directive set by the EU many years ago. But now there's a slow but steady march toward approving a single data-privacy regulation scheme for EU members. The link for this article located at Network World is no longer available. . The landscape of cloud computing encounters shifting security benchmarks and legal frameworks, particularly in the U.S. and EU, related to safeguarding personal information.. Cloud Computing, Data Privacy, Security Regulations, EU Data Protection, Compliance Requirements. . Anthony Pell
Nov 09, 2012
•
Network Security
67
security threatssecurity standardscryptography768-Bit RSA Encryption Cracked By Researchers: Global Impact
Researchers have decomposed a 768-bit number with 232 decimal places into its two prime factors and published a paper with their results. The number is the string released as "RSA-768" under the now defunct RSA Challenge. As a result, RSA encryptions with 768-bit keys must, from now on, be considered cracked. . It took the team of researchers from Switzerland, Japan, Germany, France, the US and the Netherlands about two and a half years to perform the factorisation. The first step of the calculation, polynomial selection, required half a year on a cluster consisting of 80 PCs, while the second and considerably more labour-intensive sieving step took about two years on a cluster of several hundred computers. According to the researchers, a single Opteron processor with 2 Gbytes of RAM would have needed about 1,500 years to complete the sieving step. The link for this article located at H Security is no longer available. . It took the team of researchers from Switzerland, Japan, Germany, France, the US and the Netherlands. researchers, decomposed, 768-bit, number, decimal, places, prime, factors. . LinuxSecurity.com Team
Jan 08, 2010
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!