Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 60 articles for you...
74
network securitysecurity assessmentthreat managementExploring Linux Vulnerability Scanners: Tools for Enhanced Security
The world is becoming 'smarter' and increasingly digital daily, which can only mean one thing. To ensure that all systems and applications are secure, a sound mechanism must be in place to identify security threats before malicious actors exploit them. . Cyber threats are becoming more advanced every day, which means an organization has to be on its toes to maintain its security posture. Vulnerability scanning is one of the best ways to identify and mitigate potential vulnerabilities within a system or application. In this article, I’ll explain open-source vulnerability scanning, describe the different types, and identify some of the best free, adaptable scanner options available to Linux users. What is a Vulnerability Scanner? A vulnerability scanner is a unique tool developed to model the security posture of a system, network, or application by identifying known vulnerabilities. These tools automate the security auditing process by scanning websites and cloud applications for any signs of vulnerabilities. In this respect, they assist an organization in building its defense by providing depth against hostile actors. Such scanners ensure a prioritized list of cybersecurity vulnerabilities that need to be fixed, elaborating on the nature of each and the steps required for fixing them. Advanced tools provide automated patching for seamless remediation. These vulnerabilities need to be addressed without delay. Unpatched security vulnerabilities expose a system to cyberattacks, enabling hackers to exploit these weaknesses. This can cause monumental monetary losses and reputation damage. CISA states, " Timely patching is essential to protect systems from threats." Vulnerability scanning tools utilize substantial databases of known vulnerabilities to scan systems for risks systematically. Like antivirus software and intrusion detection systems, scanners significantly maintain optimal data and network security. Type of Scanners Vulnerability scanners can fit into four broadcategories, each aiming at different areas of network security: Data-based Vulnerability Scanners Today, organizations operate in an information-intensive environment where a considerable amount of critical data must be safeguarded. Whenever sensitive information gets lost, the impacts on a strong reputation and high economic losses are unbearable. Data-based vulnerability scanners attack database vulnerabilities. They hunt for issues such as Patch deficiencies, weak passwords, and poor configurations. Furthermore, they may give the user live feeds about a possible vulnerability. As a result, these tools empower the user to adopt an immediate and combative attitude towards threats in network security. Network-based Vulnerability Scanners Organizational networks are continuously becoming interconnected, increasing the risk of security hazards. Network-based scanners assist in discovering vulnerabilities in both wired and wireless networks. They constantly monitor probable threats in real time and help organizations take essential precautions to avoid security risks before they can be exploited. Host-based Vulnerability Scanners Though security is an inherent feature in most web hosting platforms, a few bugs can still be traced. The host-based vulnerability scanners installed on every host in the system give full-fledged information about possible vulnerabilities due to insider threats or attacks from outside. By constantly monitoring each host, these scanners enable organizations to remain proactive on network security. Cloud-based Vulnerability Scanners Due to the remote work trend, cloud-based vulnerability scanners have gained immense momentum as companies become increasingly dependent on cloud services. Vulnerability Scanning cloud-based tools focus on detecting vulnerability issues in the cloud environment, including applications and web assets. Since the cloud environment is dynamic, periodic cloud security checks must be performed by an organization to reduce emergent threatfactors effectively. Understanding the Importance of Vulnerability Scanning The deployment of scanning tools to identify vulnerabilities plays a vital role in several ways: Proactive Threat Management: Vulnerability assessment and scanning enable an organization to keep identifications and patches ahead of malicious actors' exploits. Regulatory Compliance: Most industries operate under strict regulatory requirements that require periodic security assessments. In scenarios like these, applying a vulnerability scanner proves beneficial in keeping organizations compliant and negating potential penalties. Security Posture: It improves the systematic identification and one-by-one remediation of the various vulnerabilities present within an organization, ultimately enhancing its security posture and minimizing the chances of a successful cyber-attack. Cost Savings: Finding vulnerabilities earlier saves the organization millions of dollars in costs related to data breaches, regulatory fines, and reputational damage. IBM reports that the average data breach cost reached $4.45 million in 2023- a significant amount when considering the financial aspect of cybersecurity. Top Free and Open-Source Vulnerability Scanners Several excellent free and open-source vulnerability scanners are available to Linux users. Our top choices include: OpenVAS OpenVAS is a powerful open-sourced vulnerability scanner. It has broad scanning capabilities and utilizes a robust database of known vulnerabilities to conduct in-depth system assessments. The output from OpenVAS can be very detailed, thus allowing an organization to prioritize remediation efforts accordingly. Nessus Essentials Though Nessus is a commercial tool, it has a free version called Nessus Essentials. This limited version can scan up to 16 IP addresses and provides access to most of the essential functions of vulnerability scanning. In general, Nessus has an easy-to-use interface and a large vulnerabilitiesdatabase. Security experts admit it is one of the best tools for finding vulnerabilities. Nmap Nmap is not strictly a vulnerability scanner but a robust network exploration tool that can also perform security scanning. Its scripting engine allows users to develop custom scripts to identify vulnerabilities in networked systems. Nmap is widely used for network mapping and security auditing. Nikto Nikto is a web server scanner specialized in identifying vulnerabilities within web applications. The tool performs comprehensive checks against various web server configurations and finds outdated software, possible security misconfigurations, and known vulnerabilities. W3AF W3AF is an open-source web application security scanner designed to identify vulnerabilities in web applications. This tool has different plugins for deep testing and helps secure web applications against common threats like SQL injection and cross-site scripting. Arachni Arachni is a full-featured web application security scanner capable of mapping paths, input points, and topics in depth. It can perform different advanced scans and provide detailed reports that will help developers fix security issues that have been found efficiently. Our Final Thoughts on the Importance of Linux Vulnerability Scanners Open-source vulnerability scanning tools are a much-needed part of a modern cybersecurity strategy. By being informed of the tools available to Linux users and using them correctly, admins and organizations can enhance their security posture to effectively mitigate threats emanating from an increasingly complicated digital landscape. Regular vulnerability assessments are a best practice and a must in fighting criminal activities online. . In order to strengthen defense mechanisms, deploying vulnerability assessment tools for Linux is crucial in addressing sophisticated cybersecurity risks.. Linux security tools, open-source vulnerability assessment, network threat management. . Dave Wreski
Oct 23, 2024
•
Network Security
82
security advisoryopen-sourcerisk mitigationGovernment Advisory for Healthcare on Open-Source Threats
The government's warning to the health sector to watch for open-source threats has long been on the radar of the IT industry. Open-source software, which is free to use, can be a great tool for organizations that need to scale quickly or don't have the budget for proprietary software. However, using it has inherent risks, and no one knows that better than the government. . The government says that open-source security vulnerabilities can allow hackers access to systems and networks and cause damage that could cost millions of dollars in damages and lost data or productivity. They also say that hackers could use these vulnerabilities as entry points into other parts of an organization's network or infrastructure. The government is trying to help by offering guidance on how to mitigate these risks and what steps should be taken if you suspect an open-source vulnerability may have compromised your system. Healthcare organizations should be aware of these issues when choosing software solutions and ensure they have proper security measures before implementing them into their systems. If this advice is followed, choosing open-source software solutions over proprietary alternatives can have significant security benefits. Check out the article linked below for more details on the government's warning and advice for mitigating risk. . Authorities encourage the medical field to tackle dangers associated with publicly available software to avert expensive information leaks.. Open Source Threats, Healthcare Security, IT Vulnerabilities. . Brittany Day
Dec 09, 2023
•
Government
77
server protectionthreat managementLinux serversMicrosoft Defender: New Server Protection Features for SMBs
Microsoft launched a preview of new server protection capabilities in its Defender for Business solution back in July. The company announced this week that this feature is now generally available to help small businesses protect Windows and Linux servers. . Microsoft Defender for Business is an endpoint security solution for small and medium-sized businesses (SMBs) with up to 300 users. The service offers attack surface reduction, threat management, antimalware protections, as well as automatic investigation and remediation features. With this release, Microsoft Defender for Business includes a threat and vulnerability management (TVM) feature that helps customers to quickly detect and address vulnerabilities. IT admins can view security recommendations for Windows and Linux servers in the Threat and Vulnerability Management dashboard. . Explore the enhancements in Microsoft Defender for Business designed for small and medium-sized enterprises, ensuring robust protection for Windows and Linux servers.. Server Protection, SMB Security Solutions, Endpoint Security. . LinuxSecurity.com Team
Dec 14, 2022
•
Server Security
209
open source softwaresecurity risksthreat managementProtecting Open Source Software from New and Evolving Threats
Open-source software has become the foundation of the digital economy: Estimates are that it constitutes 70 to 90% of any given piece of modern software. . But while it has many advantages — it is collaborative, evolving, flexible, cost-effective — it is also rife with vulnerabilities and other security issues both known and yet to be discovered. Given the explosion in its adoption, this poses significant risk to organizations across the board. Emerging issues are compounding longstanding, traditional vulnerabilities and licensing risks — underscoring the urgency and importance of securing open-source software (OSS) code made publicly and freely available for anyone to distribute, modify, review and share. “Recently, the open-source ecosystem has been under siege,” said David Wheeler, director of open-source supply chain security at the Linux Foundation . . Free software plays a crucial role but also poses significant security threats that require immediate action. Learn more about it here.. Open Source Security, Software Risks, Collaborative Software. . Brittany Day
Aug 22, 2022
•
Security Trends
209
security practicespatch managementthreat managementEnterprise Survey Insights: Vulnerability Detection And Patch Management
Detecting vulnerabilities and managing the associated patching is challenging even in a small-scale Linux environment. Scale things up and the challenge becomes almost unsurmountable. There are approaches that help, but these approaches are unevenly applied. Learn what a new survey reveals about how enterprises handle the security concerns of vulnerability detection and patch management. . In our survey, State of Enterprise Vulnerability Detection and Patch Management, we set out to investigate how large organizations handle the dual, linked security concerns of vulnerability detection and patch management. The results produced interesting insights into the tools that organizations depend on to effectively deal with vulnerability and patch management at scale, how these tools are used, and which restrictions organizations face in their battle against threat actors. Download the copy of the report State of Enterprise Vulnerability Detection and Patch Management report . . Explore how major corporations approach risk identification and update implementation based on the insights we've gathered from our recent questionnaire.. Vulnerability Detection, Patch Management, Enterprise Cybersecurity, IT Security Practices. . Brittany Day
Jun 09, 2021
•
Security Trends
78
IT securitydevice managementvulnerability assessmentMicrosoft Threat Management For Linux Devices: Secure Your Apps
Microsoft is bringing its Threat and Vulnerability Management (TVM) capability to Linux, allowing admins to review recently discovered vulnerabilities within applications and potential misconfigurations across Linux and remediate any affected managed and unmanaged devices. The popular product is in public preview for Linux as of yesterday. . Microsoft is enabling IT pros to keep tabs on the security of their Linux devices using the company's Defender for Endpoint product (formerly known as Microsoft Defender Advanced Thread Protection). The Threat and Vulnerability Management (TVM) capabilities already available for Windows, and Windows Server are now also in public preview for macOS and Linux as of today, May 11. And Microsoft plans to bring TVM to Android and iOS devices later this summer , officials said today. . Google strengthens developer resources by launching application insights for Android, improving app performance significantly.. Microsoft Threat Management,Vulnerability Assessment Linux,Defender for Endpoint,Linux Device Security. . LinuxSecurity.com Team
May 12, 2021
•
Vendors/Products
210
security advisoryinformation leakcode executionNvidia Driver Update: Six Bugs Resolved, Including Code Execution Risk
Nvidia has released a set of security updates to remove six vulnerabilities in the Nvidia GPU Display Driver impacting both Linux and Windows machines. . This week, the tech giant published a security advisory for a total of six bugs in the driver, varying in severity with CVSS scores of between 5.5 and 7.8 and impacting both Windows and Linux machines. The first vulnerability, CVE‑2020‑5962, is found in the Nvidia Control Panel component of the driver, in which a local attacker can corrupt system files, leading to denial of service or privilege escalation. . The recent patch from Nvidia tackles five vulnerabilities in their graphics driver, enhancing protection for users on both macOS and Android platforms.. Nvidia Driver Update, Code Execution Bug, Information Leak Fix, Security Updates, Linux Driver Security. . Brittany Day
Jun 26, 2020
•
Security Vulnerabilities
78
security advisorythreat managementpenetration testingNordVPN: Enhancements After Server Breach and Cybersecurity Audit
Following an attack that breached one of its servers, NordVPN is taking several steps in an effort to show customers that it can still provide secure access to the internet. Learn more: . NordVPN is taking steps to ensure customers that it can stay true to its promise of providing "secure and private access to the internet" after admitting that an attacker breached one of its servers. To start with, its in-house team of penetration testers will now be working with cybersecurity firm VerSprite to conduct comprehensive penetration testing, intrusion handling and source code analysis. The firm will also help NordVPN form an independent cybersecurity advisory committee as part of their long-term partnership. In an effort to find vulnerabilities before a bad actor does again, it's also launching a bug bounty program over the next few weeks. NordVPN also promises to undergo a complete a full-scale third-party independent security audit covering its hardware, software, backend architecture, backend source code and internal procedures in 2020. The link for this article located at Engadget is no longer available. . Following a server compromise, NordVPN is bolstering its security protocols by implementing comprehensive audits and introducing a bug bounty initiative.. NordVPN, Security Audit, Threat Management, Bug Bounty, Cybersecurity Enhancement. . LinuxSecurity.com Team
Oct 30, 2019
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!