Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 46 articles for you...
67
data securityencryptionsecurityExploring Cryptographic Methods for Secure Data Transmission
Due to the increasingly complex nature of data transmission, it has becomes a necessity to use various levels and types of cryptography within the scope of many environments. Onc critical issue that arrises from this is that it is . . . . Due to the increasingly complex nature of data transmission, it has becomes a necessity to use various levels and types of cryptography within the scope of many environments. Onc critical issue that arrises from this is that it is difficult to compare and contrast various types of cryptographic schema. How does a 1024 bit RSA key stack up against a 1024 bit 3DES key? How does elliptic curve cryptography compare to more common algorithims? These kind of questions are difficult to answer, but if you manage an environment where security and cryptography are critical components, they are question you just might need to be able to resolve. The link for this article located at Network Computing is no longer available. . Due to the increasingly complex nature of data transmission, it becomes necessary to use various cryptographic methods for security.. Data Security,Cryptographic Methods,Encryption Techniques,Transmission Security. . LinuxSecurity.com Team
Jan 01, 2020
•
Cryptography
67
cyber threatssecurity techniquesmalware attackPreventing Cryptojacking: Strategies To Safeguard Your Systems
Criminals are using ransomware-like tactics and poisoned websites to get your employees’ computers to mine cryptocurrencies. Here’s what you can do to stop it. . Cryptojacking is the unauthorized use of someone else’s computer to mine cryptocurrency. Hackers do this by either getting the victim to click on a malicious link in an email that loads cryptomining code on the computer, or by infecting a website or online ad with JavaScript code that auto-executes once loaded in the victim’s browser. Either way, the cryptomining code then works in the background as unsuspecting victims use their computers normally. The only sign they might notice is slower performance or lags in execution. . Uncover the mechanisms behind cryptojacking, its impact on system efficiency, and vital strategies for defense and recovery from such intrusions.. Cryptojacking Prevention, Malware Protection, Cybersecurity Techniques. . LinuxSecurity.com Team
Aug 02, 2019
•
Cryptography
77
security threatsweb securityIT securityExploring Key Web Security Threats And Proactive Defense Techniques
For all too many companies, it . An effective approach to IT security must, by definition, be proactive and defensive. Toward that end, this post is aimed at sparking a security mindset, hopefully injecting the reader with a healthy dose of paranoia. . An effective approach to IT security must, by definition, be proactive and defensive. Toward that en. companies, effective, approach, security, definition, proactiv. . LinuxSecurity.com Team
Sep 17, 2015
•
Server Security
79
security techniquesmalware defenseattack mitigationInnovative Sandboxing Techniques Strengthen Malware Defense Strategies
Hackers are finding ways to bypass sandboxes and sneak in their malware, so some vendors are creating new approaches to counter them. Attackers continue to find ways to evade traditional sandboxes, and some vendors are looking to raise the bar with new approaches to isolating and vetting files.. Sandboxing adds an extra layer of protection, diverting untrusted files or programs from unverified third parties, suppliers, or websites into a separate, secure environment where they can be inspected for malicious code. Based on that inspection, the attachments, files or applications are either allowed to enter or rejected from moving further into the network. The link for this article located at Dark Reading is no longer available. . Sandboxing adds an extra layer of protection, diverting untrusted files or programs from unverified . hackers, finding, bypass, sandboxes, sneak, their, malware, vendors, creatin. . LinuxSecurity.com Team
Sep 07, 2015
•
Security Projects
79
security techniquescompetitionlock pickingMastering Lock Picking Skills: Techniques and Competitions
For a lock picker, the world is a different place. Take, for example, a typical suburban house, with a bicycle in the front yard and a five-pin Weiser bolting the front door. When most people see that lock, they see security. But a lock picker sees a game. And maybe 15 seconds with a rake pick and a tension wrench. As for the bike Kryptonited to the railing out front? Please. Ten seconds, tops, with a Bic Round Stic ballpoint. The link for this article located at Wired is no longer available. . Delve into the fascinating realm of lock picking tournaments, where safeguarding becomes a thrilling challenge tackled by specialists.. lock picking, competition techniques, infiltration methods, security games. . LinuxSecurity.com Team
Dec 08, 2014
•
Security Projects
79
security techniquessoftware bugsdevelopment practicesExploring The Impact Of Software Bugs On Development Practices
Another month, another few dozen patches to install -- it's never-ending. It's frustrating. Software coding tools supposedly have security built in by default. We have "safe" programming languages. We have programmers using SDL (security development lifecycle) coding tools and techniques.. We have operating systems with more secure defaults and vendors that fuzz and attack their own software with a vengeance to find holes. We have companies spending billions of dollars to eliminate software bugs. The link for this article located at InfoWorld is no longer available. . We have operating systems with more secure defaults and vendors that fuzz and attack their own softw. another, month, dozen, patches, install, never-ending, frustrating, software. . LinuxSecurity.com Team
Jul 14, 2014
•
Security Projects
67
security techniquesonline privacyanonymity networkNSA Exploits Tor Users: QUANTUM and FOXACID Attacks Explained
The online anonymity network Tor is a high-priority target for the National Security Agency. The work of attacking Tor is done by the NSA's application vulnerabilities branch, which is part of the systems intelligence directorate, or SID. The majority of NSA employees work in SID, which is tasked with collecting data from communications systems around the world.. According to a top-secret NSA presentation provided by the whistleblower Edward Snowden, one successful technique the NSA has developed involves exploiting the Tor browser bundle, a collection of programs designed to make it easy for people to install and use the software. The trick identifies Tor users on the Internet and then executes an attack against their Firefox web browser. The link for this article located at Schneier on Security is no longer available. . Discover the methods employed by the NSA to track Tor users through sophisticated exploitation strategies and maneuvers aimed at undermining privacy.. Tor Exploitation, Online Privacy, NSA Attacks, Firefox Vulnerabilities. . LinuxSecurity.com Team
Oct 08, 2013
•
Cryptography
77
access controlsecurity techniquesauthenticationEvaluating SSH Security: Alternatives To Port Knocking For Access Control
The robots currently at work knocking around for your guessable password could easily be repurposed to guess your Unicode password currently known as your port knocking sequence, and quite likely have been already. Plus, we already have authpf(8) for network-level restrictions on access. . Whenever you write about security in general and SSH security in particular (and for good measure also get slashdotted for your efforts), the comments inevitably turn up a variety of useful and less useful suggestions. The link for this article located at That grumpy BSD guy is no longer available. . Port knocking allows access to services by sending a sequence of packet "knocks" but has vulnerabilities like reliance on secrecy and lack of encryption. Port Knocking Alternatives, Secure SSH Access, SSH Security Techniques. . LinuxSecurity.com Team
Apr 13, 2012
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!