Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 7 articles for you...
78
Fedoraoperating systemLinux kernelFedora 40: Security Enhancements And Performance Improvements Overview
Fedora 40 , the newest version of the Fedora operating system, is an efficient and lightning-fast release with various new and useful features. Compared to its previous releases, Fedora 40 is lightning-fast and offers maximum efficiency to users. . The new features of Fedora 40 are also noteworthy, including Systemd hardening for enhanced security, the expandable notification feature, Linux kernel 6.8, built-in IP Address conflict mitigation, MAC address randomization for Wi-Fi connections, and the new Global Search feature. What Are the Implications of Fedora 40's New Features? The new GNOME Global Search feature is somewhat misleading because it doesn't always search the entire folder structure. This may have implications for users relying on this feature, such as users who struggle to conduct a thorough search. Sysadmins and security professionals need accurate results when searching for specific files or malware on a system, and the accuracy of this feature is critical to achieving that. Moreover, adding the expandable notification feature and the issue of adding online accounts to GNOME may have implications for security professionals. By redirecting authentication to the default browser (Firefox), Fedora is taking steps to secure user accounts. However, the absence of a default email client in the beta release restricts users who wish to sync email or calendar events. Additionally, problems exist with The Files’ Global Search function, which means users should exercise caution implementing this feature. Though beta releases are generally buggy, a reliable and efficient search function is vital for users navigating the operating system’s file system to carry out tasks. Users may struggle to complete some tasks without proper functionality, leading to frustration and negatively impacting productivity. Our Final Thoughts on the Fedora 40 Release Though the release of Fedora 40 may appear minimal in design, its new features and lightning-fast performance make it aworthwhile upgrade to consider. Its underlying security features offer an extra layer of protection for users, and the expandable notifications feature cleans up the clutter in the notification bar. Nevertheless, the name “Global Search” may be misleading, and users must exercise caution when relying on this feature. Although Fedora 40 has drawbacks, the new release offers a promising future for this open-source operating system. Want to give it a try? You can download Fedora 40 here. . Fedora 40 presents impressive features for developers and everyday users, highlighting enhanced Systemd hardening that boosts security and reduces vulnerabilities.. Fedora 40, Linux Kernel 6.8, Systemd Hardening, Security Features, Global Search. . Brittany Day
Apr 24, 2024
•
Vendors/Products
212
open source projectsecurity upgradenetworking enhancementCilium 1.14 Delivers Enhanced Networking And Security Features
Cilium , an open-source networking, security and observability project, has released version 1.14 with an array of connectivity, security and observability updates. The Cilium 1.14 update also introduces new mesh capabilities, high-speed networking and security enhancements. . “Cilium is quickly growing beyond Kubernetes and beyond container networking ,” Thomas Graf, founder of Cilium and CTO of Isovalent, told SDxCentral. “It is becoming an overall cloud-native connectivity platform meeting enterprise-grade standards.” To date, Cilium has been largely used alongside the Kubernetes container orchestration platform, but the 1.14 release unshackles it to enable much broader networking use cases. Cilium is an open-source project hosted by the Cloud Native Computing Foundation (CNCF) , with commercial support from startup Isovalent (formerly known as Covalent). At the core of Cilium is the use of the eBPF (extended Berkeley Packet Filter), which is a Linux kernel technology that can be used for networking security and observability. The Cilium project got started in 2015 and has grown significantly over the years, now counting IKEA, the New York Times and Bloomberg among its users. . Cilium 1.14 boosts networking, protection, and visibility, extending its reach beyond Kubernetes to cater to various cloud-native applications.. Cilium, Networking, Security Enhancements, Cloud-Native Connectivity, Open Source. . Brittany Day
Jul 29, 2023
•
Cloud Security
76
open source toolssecurity upgradecode securityLinux Foundation Membership Summit: LFX Security Upgrade Against Attacks
To address the growing threat of software supply chain attacks , the Linux Foundation announced at the at the Linux Foundation Membership Summit that it is upgrading its LFX Security module to deal with these attacks. . "LFX supports projects and empowers open source teams by enabling them to write better, more secure code, drive engagement, and grow sustainable software ecosystems," the Linux Foundation says . Now, to address the growing threat of software supply chain attacks , the foundation is upgrading its LFX Security module to deal with these attacks. Jim Zemlin, the Linux Foundation's executive director, announced this new tooling today at the Linux Foundation Membership Summit . . The Linux Foundation upgrades LFX Security to address rising threats in the software supply chain and bolster code integrity.. Supply Chain Security, Open Source Initiative, LFX Tools. . Brittany Day
Nov 04, 2021
•
Organizations/Events
76
hardware supportsecurity upgradekernel releaseLinux Kernel 5.5: Major Security Enhancements and Hardware Improvements
With the regular milestone of Release Candidate (rc7), Linus Torvalds hasannouncedthe first stable release of the Linux kernel 5.5 for the general public.Apart from the last-minute network driver fixes, Linux 5.5 includes various improvements for security,the new and upcoming hardware platforms such as Raspberry Pi 4, Intel processors, and Chromebooks. . Linux 5.5, named as Kleptomaniac Octopus, brings many file system changes to the XFS, exFAT, and ext4. Ext4 now has direct I/O via iomap and fscrypt support for smaller block sizes. To further increase the security, VMs on Microsoft Hyper-V can finally hibernate, and kernel concurrency sanitizer sets for spotting data race conditions. Inspired by WireGuard’s zinc crypto API, cryptoimproves to support WireGuard in the upcoming Linux 5.6. The link for this article located at Fossbytes is no longer available. . Linux 5.5, named as Kleptomaniac Octopus, brings many file system changes to the XFS, exFAT, and ext. regular, milestone, release, candidate, (rc7), linus, torvalds, hasannouncedthe, first, stable. . Brittany Day
Jan 27, 2020
•
Organizations/Events
67
browser securitySHA-1certificate authorityGoogle's CA Updates Schedule: A Key to Elevating Web Security Standards
Miffed certificate authorities are calling on Google to give websites more time to upgrade the security used in browser-to-server communications before displaying warnings in Chrome.. The CAs are upset over Google's roughly six-month timetable for ratcheting up the notices that begin this month for Chrome users visiting sites that do not upgrade from SHA-1 to SHA-2. The link for this article located at CSO Online is no longer available. . The schedule set by Mozilla for browser certificate renewals raises alarms among regulators impacting online safety.. Certificate Security, Browser Communication, SHA-1 Upgrade. . LinuxSecurity.com Team
Sep 11, 2014
•
Cryptography
74
IT managementwireless securityenterprise securitySignificant Upgrade to WPA2: Wireless Security Enhancement
The Wi-Fi Alliance says WPA2 is a big improvement on earlier wireless security standards, such as Wired Equivalent Privacy (WEP), which hackers have found easy to circumvent. It includes Advanced Encryption Standard, which supports 128-bit, 192-bit and 256-bit keys . . .. The Wi-Fi Alliance says WPA2 is a big improvement on earlier wireless security standards, such as Wired Equivalent Privacy (WEP), which hackers have found easy to circumvent. It includes Advanced Encryption Standard, which supports 128-bit, 192-bit and 256-bit keys. Because WPA2 is compatible with WPA, companies that have already implemented WPA can upgrade to the new standard in stages. "WPA2 is ideally suited for enterprises in both the public and private sectors," said Frank Hanzlik, Wi-Fi Alliance managing director. "Products that are certified for WPA2 give IT managers the assurance that the technology meets interoperability standards and in turn helps them manage support and deployment costs." . WPA3 represents a major leap in wireless security protocols, offering improved safeguards compared to prior technologies such as WPA2.. Wi-Fi Standards,WPA2 Security,Wireless Encryption. . Anthony Pell
Sep 03, 2004
•
Network Security
82
critical infrastructureinformation sharingthreat managementFS/ISAC Secures $2 Million for Enhanced Threat Management Upgrade
The Treasury Department on Tuesday signed a $2 million one-time contract to upgrade the Financial Services Information Sharing and Analysis Center (FS/ISAC), which serves as the central point for the sector's critical infrastructure warnings. . .. The Treasury Department on Tuesday signed a $2 million one-time contract to upgrade the Financial Services Information Sharing and Analysis Center (FS/ISAC), which serves as the central point for the sector's critical infrastructure warnings . The center is one of many that industries and their government liaisons formed since 1998 to share vulnerability information and alerts when incidents occur that affect critical infrastructure, such as telecommunications and banking. The FS/ISAC was one of the first to be formed and experts have often held it up as an example for other sectors. Money from Treasury will allow the center to expand to serve the entire financial industry, department officials said. The link for this article located at FCW is no longer available. . The Treasury Department on Tuesday signed a $2 million one-time contract to upgrade the Financial Se. treasury, department, tuesday, signed, million, one-time, contract, upgrade, financial. . Anthony Pell
Dec 12, 2003
•
Government
72
network securityapplication protectionlinux firewallAhorro Corporación Enhances Security with Linux and StoneGate Integration
As part of the 'shake up' in its security system, Ahorro Corporación decided to change the platform for its applications and choose to invest in Linux. This meant that the firewall would also have to run with Linux. The StoneGate firewall . . . . As part of the 'shake up' in its security system, Ahorro Corporación decided to change the platform for its applications and choose to invest in Linux. This meant that the firewall would also have to run with Linux. The StoneGate firewall and VPN came with its own hardened Linux operating system, which made it totally compatible with Ahorro's new platform while allowing the whole solution to run on any standard hardware. Having met this initial criteria, StoneGate was interesting to Ahorro for a number of other reasons including the high availability which was included as standard and that it offered flexible facilities to define policies The link for this article located at Dr. Dobbs is no longer available. . Ahorro Corporación upgraded its defenses using Linux, incorporating the StoneGate firewall for enhanced application protection.. Linux Firewall, StoneGate Security, Application Protection. . Anthony Pell
Oct 28, 2003
•
Firewalls
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!