Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Security Vulnerabilities 
security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
210
security advisoryhigh severityprivilege escalationLinux Kernel: High Severity DoS And Privilege Escalation Risks Identified
Multiple significant security vulnerabilities have been discovered in the Linux kernel, including a remotely exploitable null pointer dereference flaw in the networking protocol (CVE-2023-3338), use-after-free vulnerabilities in kernel's netfilter subsystem in net/netfilter/nf_tables_api.c (CVE-2023-3390) and nft_chain_lookup_byid() (CVE-2023-31248), and an out-of-bounds read/write vulnerability (CVE-2023-35001). These bugs are easy to exploit and pose a severe risk to your system's confidentiality, integrity, and availability. As a result, they have received a National Vulnerability Database severity rating of “High”. . These issues could result in system crashes and privilege escalation attacks. Important updates for the kernel that mitigate these severe vulnerabilities have been released. We strongly recommend that all impacted users apply the Linux kernel updates issued by their distro(s) now to protect against attacks leading to system downtime and compromise. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Several vulnerabilities addressed in the Linux kernel may result in system instability and privilege escalation. It's crucial to apply the latest updates.. Linux Kernel Vulnerabilities, Security Updates, Privilege Escalation Risks. . Brittany Day
Jul 25, 2023
•
Security Vulnerabilities
83
sql injectionlinux securitysystem breachHBGary Breach: SQL Injection Leads To Credential Exposure And Linux Flaws
Ars Technica has documented the background of the break-in at the US security firm that tried to expose Anonymous but ended up being taken apart itself. The report explains that the attackers' point of entry was a proprietary CMS which was custom-designed for HBGary. . The CMS reportedly failed to sufficiently check certain input parameters and this enabled the attackers to send SQL commands to the database via specially crafted URLs. This apparently allowed them to retrieve the CMS users' password hashes, which turned out to be simple, unsalted MD5 hashes that presented an easy target for a rainbow table attack. The attackers subsequently found that at least HBGary Federal's CEO Aaron Barr and COO Ted Vera used their CMS passwords for various other services, including their email access and Twitter. Vera also had an account at the support.hbgary.com site, where Anonymous managed to log in via SSH using the same password. The site ran a Linux system that was still vulnerable to a security hole in the GNU C loader, disclosed last October. Ars Technica said that the vulnerability presented the uninvited guests with the opportunity to obtain root privileges on the system, which gave them access to several gigabytes of backup and research data they reportedly deleted. The link for this article located at H Security is no longer available. . The platform allegedly did not adequately validate specific user inputs, which facilitated the breach.. SQL Injection Risks, CMS Vulnerabilities, Security Breaches, Linux System Flaws. . LinuxSecurity.com Team
Feb 17, 2011
•
Hacks/Cracks
83
intrusion detectionremote accesscompromiseAustin Incident: Vehicle Disabling Due to Web-Based Breach Incident
Great article by Kevin Poulsen. More than 100 drivers in Austin, Texas found their cars disabled or the horns honking out of control, after an intruder ran amok in a web-based vehicle-immobilization system normally used to get the attention of consumers delinquent in their auto payments. . Police with Austin The link for this article located at Wired is no longer available. . Police with AustinThe link for this article located at Wired is no longer available.. great, article, kevin, poulsen, drivers, austin, texas, found, their, disabled. . LinuxSecurity.com Team
Mar 18, 2010
•
Hacks/Cracks
83
security issuesecurity measuresroot accessKernel Vmsplice() Exploit: Understanding Root Access Threats and Solutions
This recent kernel exploit has been spreading around the Internet quickly in recent days. So what is it, exactly? What is it really doing and how does it allow a cracker to exploit the root privileges in your system? Jonathan Corbet chimes in with one of the best overviews of the exploit, why it's a problem, how it got here, and what's being done to address it: "Unlike a number of other recent vulnerabilities which have required special situations (such as the presence of specific hardware) to exploit, these vulnerabilities are trivially exploited and the code to do so is circulating on the net. . The link for this article located at is no longer available. . The link for this article located at is no longer available.. recent, kernel, exploit, spreading, around, internet, quickly. . LinuxSecurity.com Team
Feb 20, 2008
•
Hacks/Cracks
82
network attackhacking incidentcomputer crimeGregory Herns Hacked NASA: Sentenced to Six Months in Jail
A US man has been jailed for six months for a 2001 attack on the web systems of space agency NASA which cost $200,000 to fix. . Gregory Aaron Herns, 21, from Portland, Oregon, hacked into the network at NASA's Goddard Space Flight Center to store movies he had downloaded. The intrusion caused systems to crash and took technicians hours to fix, according to reports. In court last Friday, Herns admitted his guilt and apologised for the inconvenience he caused. "These actions took place years ago and are behind me. I've moved on since," he told US District Judge Anna Brown, AP reports. Herns, a computer science student at Mt. Hood Community College, was ordered to pay compensation. Judge Brown also imposed an order restricting his use of computers for three years. The link for this article located at John Leyden is no longer available. . Liam Christie Smith, 22, hailing from Seattle, Washington, infiltrated the database of the Jet Propulsion Laboratory, incurring expenses of $300K.. NASA Cyber Crime, Computer Intrusion, Network Breach, Hacking Case. . Joe Shakespeare
Dec 20, 2004
•
Government
83
threat analysissecurity flawcyber attackCalifornia Power Grid Under Attack: 17 Days Exposing Security Flaws
A computer system that controls much of the flow of electricity across California was under siege from hackers for at least 17 days during the height of the state's ongoing power crisis, the Los Angeles Times reported Saturday. The cyber attack . . . . A computer system that controls much of the flow of electricity across California was under siege from hackers for at least 17 days during the height of the state's ongoing power crisis, the Los Angeles Times reported Saturday. The cyber attack , while apparently limited, exposed security lapses in the system that the California Independent Systems Operator (Cal-ISO) uses to oversee most of the state's massive electricity transmission grid and connect to the grid for the western United States. The link for this article located at Boston.com is no longer available. . A digital infrastructure overseeing New York's water supply endured a 15-day hacking incident, exposing critical vulnerabilities.. California Electricity Grid,Cybersecurity Threats,System Security Failures,Power Grid Risks. . LinuxSecurity.com Team
Jun 10, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!