Explore top 10 tips to secure your open-source projects now. Read More
×
Server Security
data privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Security Vulnerabilities security advisory linux distribution
security advisory linux distribution ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party certificate authority, regardless of the installed operating system (OS). Reported shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits even on systems with UEFI Secure Boot enabled.....
Jul 16, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security news
We found 19 articles for you...
214
remote accessdevice managementsshSecure SSH Access And Web Portals For Raspberry Pi Devices
In the rapidly evolving world of managing Internet of Things (IoT) devices, ensuring secure remote access to ssh iot devices behind firewalls and NAT routers is of utmost importance. This article explores remote IoT device management, focusing on the secure ways to access Raspberry Pi web devices remotely. We will delve into two key methods - SSH (Secure Shell) and web-based access, highlighting the benefits they offer in overcoming firewall and network address translation challenges. . One of the most trustworthy and secure methods for accessing ssh iot devices behind firewalls is through SSH. SSH empowers users to make a secure connection with their IoT device, guaranteeing the protection and security of their communication. Whether users are dealing with a Raspberry Pi or other Linux-based devices, SSH provides a protected and reliable solution. In the world of IoT device management, user-friendliness is key. Web-based access to Raspberry Pi simplifies the process and enhances accessibility. With a web portal, users can establish a direct connection with their Raspberry Pi the way it was on their local network. This eliminates the need to discover the IoT device's IP address or make complex firewall adjustments. While SSH is known for its security, web-based access is favored for its ease of use. This approach allows users to send commands and batch jobs to their Raspberry Pi with convenience. The link for this article located at Digital Journal is no longer available. . Explore reliable techniques to remotely access IoT devices, emphasizing SSH and web interfaces for Raspberry Pi systems.. IoT Remote Access,Raspberry Pi Security,Secure Shell Connection,Remote Device Management. . Brittany Day
Oct 23, 2023
•
IoT Security
79
network securitysecurity toolserver protectionHow Endlessh SSH Tarpit Safeguards Your Servers Effectively
Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. Learn about Endlessh and how it helps secure SSH servers. . SSH or Secure Shell is a cryptographic network protocol for operating network services securely over an unsecured network. Typical applications include remote command-line, login, and remote command execution, but any network service can be secured with SSH. SSH was designed as a replacement for Telnet and for unsecured remote shell protocols such as the Berkeley rsh and the related rlogin and rexec protocols. Those protocols send information, notably passwords, in plaintext, rendering them susceptible to interception and disclosure using packet analysis. The encryption used by SSH is intended to provide confidentiality and integrity of data over an unsecured network, such as the Internet. . Dive into Endlessh, a unique SSH tarpit designed to safeguard servers by ensnaring clients for extended periods, presenting them with randomized banners that keep them engaged.. Endlessh, SSH Tarpit, Network Security. . LinuxSecurity.com Team
Mar 22, 2021
•
Security Projects
83
security advisorymalwaresshExploring Android Botnets: Cryptocurrency Mining Risks and ADB Exploits
There is a new cryptocurrency-mining botnet that arrives via open ADB (android Debug Bridge) ports and can spread via SSH, according to Trend Micro. . Android-based devices are susceptible to the malware due to the use of ADB. The attack exploits open ADB ports, and can spread from the infected host to any system that has had a previous SSH connection with the host. This exploitation is similar to the Satori bonnet. According to ZDNet, many Android devices have the ADB developer function and command-line tool disabled by default, but some devices do ship with the feature enabled. If it’s enabled, the device is susceptible to the attack. The link for this article located at Security Today is no longer available. . Devices using Android systems are vulnerable to malware through ADB connections. The threat capitalizes on exposed ports to proliferate.. Cryptocurrency Mining,Botnet Security,Malware Exploits,Android ADB,SSH Vulnerabilities. . LinuxSecurity.com Team
Jun 26, 2019
•
Hacks/Cracks
74
network securityremote accesssshSafely Connect to Remote Services Leveraging SSH Tools Effectively
You probably rely on the services on your own private network -- wikis, mail servers, Web sites, and other applications you've installed. What happens when you have to leave the friendly confines of your network? With minimum exposure and few simple tools, you can get all of the comforts of home anywhere you can find an Internet connection. Do you want to learn how to use SSH tools to access services on a remote private network securely? Read on to find out about some of the features of SSH which you may not be familiar with. . The link for this article located at linux.com is no longer available. . The link for this article located at linux.com is no longer available.. probably, services, private, network, wikis, servers, sites. . Brittany Day
Nov 11, 2008
•
Network Security
74
security protocolsserver protectionsshSSH Attacks Spike: Enhance Passwords And Security Measures
Thanks to the end-of-term for many colleges and some K12 schools, brute-force attacks against SSH servers surged sharply this past weekend, according to the SANS Internet Storm Center. The sudden jump in SSH attacks merits a re-examination of how such servers should be properly secured. Jim Owens and Jeanna Matthews of the Department of Computer Science at Clarkson University have published a paper on the methods that such attacks frequently employ and on the best ways to defeat them. Brute-force attacks gets a lot of attention in the press but do we really need to study it? Yes, with botnet and more powerful computers it makes brute-force attacks more affective. However, if users use strong passwords then the likely hood that they will be hacked by this type of attack goes down drastically. . The link for this article located at arstechnica.com is no longer available. . The link for this article located at arstechnica.com is no longer available.. thanks, end-of-term, colleges, schools, brute-force, attacks, against. . Bill Locke
May 16, 2008
•
Network Security
77
debianremote accessauthenticationSSH Configuration On Debian Etch: Public-Key Authentication Setup
This mini-howto explains how to set up an SSH server on Debian Etch with public-key authorization (and optionally with disabled password logins). SSH is a great tool to control Linux-based computers remotely. It's safe and secure. There's no warranty that it'll work for you. All of these settings are applicable for Debian and -like systems! There may be slightly changes on other systems as well. Know your role and your SSH! There's nothing like a concise HowTo on getting things done, and in this case you can get your SSH woes out of the way with this article. Check one of our feature stories by Ryan W. Maple for an even more in depth view SSH best practices!. The link for this article located at HowTo Forge is no longer available. . The link for this article located at HowTo Forge is no longer available.. mini-howto, explains, server, debian, public-key, authorization. . LinuxSecurity.com Team
Apr 01, 2008
•
Server Security
74
security advisoryfedorasshCreate Chrooted SSH/SFTP Setup On Fedora 7 For Enhanced Security
This document describes how to set up a chrooted SSH/SFTP environment on Fedora 7. The chrooted users will be jailed in a specific directory where they can't break out. They will be able to access their jail via SSH and SFTP. Do feel using a chroot environment helps in protecting your Linux box? It can protect your system by having chrooted users unable to effect anything thing else expect for their own environment. Have you used chroot for security, if so do you use it every time you add a new user?. The link for this article located at HowToForge is no longer available. . Enhance security by setting up a chrooted SSH/SFTP environment on Fedora 7. Follow this guide for a systematic approach to user isolation.. Chroot Setup, Secure SFTP, SSH Security, Fedora Configuration. . Bill Locke
Nov 07, 2007
•
Network Security
74
firewallsecurity strategylogin protectionEffective Protection Against SSH Brute Force Attacks Using Fail2Ban
Since 2005 there has been an immense increase in brute force SSH attacks and though Linux is pretty secure by default, it does not stop evil programs from indefinitely trying to login with different passwords. Having good firewalls is one step to help protect your Linux box. Getting the right Iptables is not always easy. The Linux user can certainly manually add Iptable rules to there firewall but is there a better way? One piece of software that can help automate part of creating firewall rules is called Fail2Ban. Do you have any favorites or a review on Fail2ban? . Without proper protection your server is a sitting duck waiting for a bot to guess the right combination and hit the jackpot. But with just 2 commands we can stop that. Iptables is the standard Linux firewall and though I use Ubuntu, it should be installed by default on any modern distribution. But it doesn't do anything yet. It's just sitting there, so we need to teach it some rules to prevent brute force attacks. The link for this article located at TechBlog is no longer available. . Fortify your server's defenses by implementing Iptables and Fail2Ban to efficiently thwart brute force SSH login endeavors.. Brute Force Protection, SSH Security, Firewall Configuration, Fail2Ban Automation. . Bill Locke
Aug 02, 2007
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!