Explore top 10 tips to secure your open-source projects now. Read More
×
Server Security
data privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Security Trends cybersecurity Linux documentation
cybersecurity Linux documentation Linux operating systems have gained prominence due to their stability, adaptability, and excellent security options. In the case of developing documentation, designing cybersecurity dashboards, or educational material, visuals are of vital importance when it comes to making things clear. The use of icons allows one to understand the message regarding alerts, authorization, encryption, authentication, or the state of the system just by looking at the visual cue without having to read long...
Jul 17, 2026
Security Vulnerabilities security advisory linux distribution
security advisory linux distribution ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party certificate authority, regardless of the installed operating system (OS). Reported shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits even on systems with UEFI Secure Boot enabled.....
Jul 16, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security news
We found 10 articles for you...
209
security practicescybersecurityopensslEvolving OpenSSL Threats: Defense Strategies After Heartbleed
In 2014, the cybersecurity community witnessed a critical OpenSSL vulnerability, “ Heartbleed ,” which changed how the world perceived digital security. It is considered to be among the most serious flaws in internet history. Heartbleed not only exposed the weaknesses in popular cryptographic protocols but also the potential repercussions of a small coding error. . Following the Heartbleed event, the cybersecurity landscape experienced a dramatic change as the emphasis shifted to fortifying security protocols and resolving the root causes of vulnerabilities. Several upgrades, improved code standards, stringent security audits, and a dedication to addressing identified vulnerabilities were the outcomes of this momentum. However, as with any constantly evolving technology, vulnerabilities continued to emerge in OpenSSL despite these efforts. The post-Heartbleed vulnerabilities remind us that security is an ongoing process, and we must remain vigilant, ensuring that security practices align with the latest security recommendations. The link for this article located at Security Boulevard is no longer available. . Following the Equifax breach, the landscape of digital security shifted dramatically, highlighting the critical need for persistent awareness.. OpenSSL Threats,Cybersecurity Trends,Code Vulnerabilities,Protocol Security. . Brittany Day
Nov 17, 2023
•
Security Trends
83
security advisorythreatsgamingUnderstanding Security Risks of Console Hacks in Online Gaming
A couple times a year, maybe, you. The forever-popular first person PC shooter, CounterStrike, is a great example of this: there always seem to be CounterStrike hacks out there. To be clear, PC and other computer gamers, particularly those playing massively multiplayer online role-playing and other popular games (like Minecraft), are already exposed to significant threats targeting their machines. Attacks targeting the XBOX or PlayStation or Nintendo consoles, however, seem to be incredibly rare. Nintendo The link for this article located at Kaspersky is no longer available. . The forever-popular first person PC shooter, CounterStrike, is a great example of this: there always. couple, times, maybe, forever-popular, first, person, shooter, counterstrike. . LinuxSecurity.com Team
Jan 28, 2014
•
Hacks/Cracks
81
privacythreatssurveillanceEavesdropping Risks In SSL Connections: EFF Warns of Surveillance Threats
The Electronic Frontier Foundation (EFF) is warning that state agencies are probably able to routinely eavesdrop on SSL-encrypted internet connections. They refer to a draft research paper in which researchers Christopher Soghoian and Sid Stamm summarise the evidence for this supposition and describe a possible defensive strategy.. The two researchers are not able to provide any hard facts. They start by stating that many governments routinely compel companies to cooperate with surveillance measures. In the USA, the statute which allows companies to be compelled to assist with such measures is "remarkably broad". According to the researchers, these statutes have been used to, for example, compel a SatNav manufacturer to activate the built-in microphone in one of its devices in order to record conversations in a vehicle. VeriSign, the largest provider of SSL certificates, is, according to the paper, also involved in outsourcing telecommunications surveillance. They conclude that government agencies must therefore also be able to compel certification service providers such as VeriSign to issue arbitrary SSL certificates. In many countries, there are government certification authorities (CA) which are stored as trusted root instances in all of the common browsers. Internet Explorer, Firefox, Safari and Chrome blindly trust more than 100 root certificates, including certificates from VeriSign, Deutsche Telekom and network administration agency CNNIC, which is controlled by the Chinese government. If a web server presents a certificate signed by one of these bodies, the user is informed that the connection is trusted by means of a padlock symbol or a green address bar. But the SSL concept is based on the trustworthiness of CAs. Anyone with a copy of the secret key for a root certificate or a major CA's intermediate certificate can spoof SSL on the fly and eavesdrop on encrypted connections. The link for this article located at H Security is no longer available. . The two researchers are not able toprovide any hard facts. They start by stating that many governme. electronic, frontier, foundation, (eff), warning, state, agencies, probably, routine. . LinuxSecurity.com Team
Mar 30, 2010
•
Privacy
76
cybersecuritygovernmentthreatsJeff Moss Insights: Cybersecurity, Government Roles And Threat Landscape
As a hacker and organizer of Defcon, at event at which computer security vulnerabilities and exploits are routinely unveiled, Jeff Moss seemed an unusual choice when he was named to the Homeland Security Advisory Council in June.. But his background and lack of government experience brings a fresh, outsider's perspective to a public sector plagued by a fast-changing threat landscape, perpetual turf wars, and bureaucratic inertia. With National Cyber Security Awareness Month under way, CNET News discussed with Moss his new role, his thoughts on the national ID card debate, and how the government wants to use social media sites for public emergency alerts. This edited interview is the first of two parts. Part two will run on Monday. The link for this article located at CNET is no longer available. . Jeff Moss shares his insights about attending Defcon, focusing on the shifting dynamics of government involvement in cybersecurity as threats continue to evolve.. Cybersecurity Government Role Defcon Insights Threat Landscape. . Anthony Pell
Oct 16, 2009
•
Organizations/Events
83
cybercrimelaw enforcementthreatsUS 19-Year-Old Phreaker Receives 11 Years For Swatting Threats
In the US a 19-year-old phreaker (or phone phreak) has been sentenced to more than eleven years in prison because he placed numerous emergency calls resulting in the dispatch of special police units or SWAT teams (Special Weapons and Tactics). The SWAT teams arrived at the locations from which the calls were placed only to find sleeping families. Such incidents are increasingly common in the US, giving rise to the term swatting.. In his calls to the 911 emergency line, the now convicted culprit sent falsified caller ID numbers and claimed to have hostages in custody. To change the caller ID function, the phreaker is reported to have manipulated several telephone networks, including AT&T, Sprint and Verizon. When a security specialist at Verizon discovered his activities and sought to investigate further, the phone phreak is said to have threatened the employee and made harassing calls to his land line number, while making the caller ID function appear to show friends and co-workers as placing the calls. At that point, the employee contacted the FBI. The link for this article located at H Security is no longer available. . A 20-year-old is convicted for issuing fake distress signals, prompting tactical unit deployments and endangering public safety.. Phreaking, Swatting, Legal Ramifications, Law Enforcement, Cybersecurity. . LinuxSecurity.com Team
Jul 01, 2009
•
Hacks/Cracks
83
malwarethreatsdocument securityOpenOffice Malware Worm Cross-Platform: Linux, Mac, and Windows
Malware targeting OpenOffice documents is spreading through multiple operating systems including Mac OS, Windows and Linux, according to Symantec. . According to the Symantec Security Response website, the worm is capable of infecting multiple operating system platforms and is spreading. The link for this article located at ZDNet is no longer available. . According to the Symantec Security Response website, the worm is capable of infecting multiple opera. malware, targeting, openoffice, documents, spreading, through, operating, systems. . LinuxSecurity.com Team
Jun 11, 2007
•
Hacks/Cracks
83
security advisorydenial of servicelegislationDoS Extortion Tactics Threaten Organizations Under New Legislation
The practice of holding websites hostage under the threat of denial-of-service (DoS) attacks is declining, according to security researchers at Symantec. DoS attacks are carried out by botnet operators using armies of remotely controlled PCs to flood a site with traffic and information requests. The attacks can cause sites and web services to run slowly or shut down altogether. . Criminals use the attacks to extort money from organisations by launching a first DoS attack and then threatening to launch further attacks unless the company pays up. The tactic has recently drawn the attention of legislators, who passed laws last November allowing for tougher punishments for the crime. The link for this article located at vnunet.com is no longer available. . Malicious actors demand ransoms from firms via DDoS assaults, leading to stricter regulations aimed at combating this digital offense.. Denial of Service, Cybercrime, Botnet Attacks, Extortion Laws. . LinuxSecurity.com Team
Apr 30, 2007
•
Hacks/Cracks
83
security riskshackingthreatsEmerging Cybercrime Tools: Risks and Implications for Security
It's becoming cheaper and easier to get hold of the tools needed to launch a cybercrime attack, security firm RSA claimed on Thursday. Jens Hinrichsen, the company's product marketing manager for fraud auction, said RSA had been monitoring the websites and ICQ channels where malicious hackers and cybercriminals interact. These sites allow participants to share feedback and even review each other's products. . Addressing an audience at the RSA Conference 2007 in San Francisco, Hinrichsen showed several screengrabs to illustrate that the prices being asked for hacking tools have been dropping, with many participants embracing volume discounts and other incentives. The link for this article located at ZDNet UK is no longer available. . Addressing an audience at the RSA Conference 2007 in San Francisco, Hinrichsen showed several screen. becoming, cheaper, easier, tools, needed, launch, cybercrime, attack. . LinuxSecurity.com Team
Feb 09, 2007
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!