Network Security
system security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Vendors/Productsincident response cloud security
incident response cloud security Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
May 19, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 4 articles for you...
78
security advisorysoftware updatemicrosoftMicrosoft Linux App Repository Changes: TLS 1.2 Usage Now Mandatory
For obvious reasons, Microsoft is pushing for the migration to TLS 1.2, and the software giant has announced a change concerning its Linux app repository. To download packages, TLS 1.2 will now be mandatory. . Hosted at packages.microsoft.com, the collection of software for Linux will no longer allow TLS 1.0 and TLS 1.1, with the company explaining that beginning with September 24, TLS 1.2 will be mandatory. In other words, clients not using TLS 1.2 will no longer be allowed to download Linux packages from Microsoft, and the firm emphasizes that companies should give up on the older version due to security risks. The link for this article located at Softpedia News is no longer available. . To enhance security measures, Microsoft has officially required TLS 1.2 for its Linux application repository, discontinuing support for previously utilized, less secure versions.. TLS 1.2 Migration, Microsoft Linux Update, Package Repository Changes. . LinuxSecurity.com Team
Aug 31, 2020
•
Vendors/Products
81
encryptioninternetsecurity protocolIETF Approves TLS 1.3 Standard: Stronger HTTPS Protection Against Snooping
The Internet Engineering Task Force (IETF) has approved version 1.3 of the Transport Layer Security (TLS), the key protocol that enables HTTPS on the web.. TLS 1.3 was approved by engineers at an IETF gathering in London last week. The approved document is the 28th version of the TLS 1.3 proposal that has been hashed out over the past four years. . The latest version of HTTP/3 gained favorable reviews at a meeting of professionals, improving web communication safety for all.. TLS 1.3, HTTPS Security, Internet Encryption, IETF Approval. . LinuxSecurity.com Team
Mar 26, 2018
•
Privacy
81
security advisorypostfixtlsConfiguring Postfix TLS: Enable Secure SMTP Connections With StartSSL
One recommended way to help secure your Postfix mail server is enabling TLS (Transport Layer Security) for connections to and from Postfix. You can search for more detailed descriptions of exactly how TLS works, but basically it. It relies on a key and a certificate to help accomplish its purposes, and this article will walk you through generating a key, getting your certificate, and installing everything on your Postfix system to enable TLS/SSL for SMTP connections. The link for this article located at Steve Jenkis is no longer available. . Enhance your Dovecot mail service by implementing SSL with a no-cost Let's Encrypt certificate for secure IMAP transactions.. Postfix TLS Configuration, StartSSL Certificate, Secure Email, SMTP Encryption. . LinuxSecurity.com Team
Jul 15, 2015
•
Privacy
67
encryptionexploitattackTLS 1.0 Weakness Exposes PayPal Cookies to BEAST Attack
Researchers have discovered a serious weakness in virtually all websites protected by the secure sockets layer protocol that allows attackers to silently decrypt data that's passing between a webserver and an end-user browser.. The vulnerability resides in versions 1.0 and earlier of TLS, or transport layer security, the successor to the secure sockets layer technology that serves as the internet's foundation of trust. Although versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost entirely unsupported in browsers and websites alike, making encrypted transactions on PayPal, GMail, and just about every other website vulnerable to eavesdropping by hackers who are able to control the connection between the end user and the website he's visiting. At the Ekoparty security conference in Buenos Aires later this week, researchers Thai Duong and Juliano Rizzo plan to demonstrate proof-of-concept code called BEAST, which is short for Browser Exploit Against SSL/TLS. The stealthy piece of JavaScript works with a network sniffer to decrypt encrypted cookies a targeted website uses to grant access to restricted user accounts. The exploit works even against sites that use HSTS, or HTTP Strict Transport Security, which prevents certain pages from loading unless they're protected by SSL. The link for this article located at The Register UK is no longer available. . Uncover the impact of a TLS vulnerability on PayPal and similar platforms, enabling hackers to decode confidential information exchanged during financial transactions.. TLS Exploit, Website Security Weakness, JavaScript Data Breach, PayPal Security. . LinuxSecurity.com Team
Sep 21, 2011
•
Cryptography
67
security advisorycommand injectiontlsSTARTTLS Command Injection Threats in SMTP: Insights from Venema
Vulnerabilities in implementations of the STARTTLS protocol for establishing an encrypted TLS connection could allow commands to be injected into a connection. According to a description by the discoverer of the problem, Postfix developer Wietse Venema, the key point is that commands are injected into the connection before it has been secured/encrypted, but are only executed once the secure connection has been established.. Venema illustrates the problem with an example involving securing SMTP with TLS. A client sends "STARTTLS\r\n"; using a man-in-the-middle attack an attacker changes this to "STARTTLS\r\nRSET\r\n". The client and server then establish a TLS connection. The server now regards the injected RSET command that was added during the unprotected phase as if it has been transferred subsequent to the TLS connection being established. The RSET command in this example is relatively innocuous as it is a harmless protocol reset command, but other commands could be injected in a similar fashion. The link for this article located at H Security is no longer available. . Postfix engineer Venema elaborates on the STARTTLS vulnerability opening doors for command injection prior to establishing TLS. Discover the potential consequences.. STARTTLS, Command Injection, SMTP Security, TLS Protocol, Encryption Risks. . LinuxSecurity.com Team
Mar 08, 2011
•
Cryptography
77
authenticationspam preventionpostfixConfigure Secure SASL Authentication For Postfix Using TLS
In today's internet there is a lot of spam, forged mails and people who make use of this. It is importatnt to be secure, secure your users and the rest of the community from your users as well. It's better to be secure than to be sorry if an accident happens.. . .. In today's internet there is a lot of spam, forged mails and people who make use of this. It is importatnt to be secure, secure your users and the rest of the community from your users as well. It's better to be secure than to be sorry if an accident happens. You may not know that your users send spam until you get on the spamming list. I hope I don't have to explain why mechanisms such as: identification, authentication and authorization have to be implemented. In this article I will show you how to force users to authenticate before sending mail through Postfix. Ready? To install postfix-current, go to /usr/ports/mail/postfix. Before making anything check your umask. Preferably it should be set to 022. Now type make. You should get a "Postfix configuration options" screen. Select: PCRE, SASL2, DB3, TLS. If you need any other options just mark them with "X" by pressing space. If your system is 5.0-RELEASE, remember there is no PERL installed by default. Now type make. The installation will take a while so sit back and relax but don't go away. Before the installation of cyrus-sasl your system will prompt you to set "Additional SASL options". Choose DB3, SASLAUTHD and accept. If the build process finished without any problems type make install. The installation script will add postfix user and group. It will also ask you about changing contents of the /etc/mail/mailer.conf. Accept the change and don't worry, you can find the old file under /etc/mail/mailer.conf.old. All configuration files you will find in the /usr/local/etc/postfix directory. The link for this article located at daemonnews is no longer available. . Fortify your Postfix configuration against unwanted messages and spoofed emails using SASL and TLS for user verification.. PostfixMail Transport,SASL Authentication,TLS Security,Email Configuration,Spam Prevention. . LinuxSecurity.com Team
Jun 13, 2003
•
Server Security
67
network securitysecurity toolscryptographyExploring OpenSSL's Versatile Capabilities for Secure Networks
When I got a new Lego set the other day, I discovered that it made a really cool train. However, it was missing the cow-catcher, so I built one for the Lego engine. There are other things I did to improve . . . . When I got a new Lego set the other day, I discovered that it made a really cool train. However, it was missing the cow-catcher, so I built one for the Lego engine. There are other things I did to improve the train car -- I added a functioning light, an electric engine, additional freight cars, and a caboose. You can think of OpenSSL as a Lego set. You're provided with the base -- the libraries and the command line tools -- but you build the rest. Like a pre-designed Lego set, OpenSSL is a cryptographic toolkit that includes libraries and the header files (the train engine) and the command-line tool. OpenSSL is based on its predecessor, SSLeay, which was originally developed as a free implementation of Netscape's Secure Socket Layer by Eric Young and Tim Hudson (both SSLeay and OpenSSL have Apache-style licenses). Both Young and Hudson did such a good job with SSLeay that they were hired by RSA Australia. Enter OpenSSL: OpenSSL builds on the work done on SSLeay, and then some. OpenSSL offers support for SSLv2 and SSLv3 as well as the IETF standard TLSv1. In addition to that, OpenSSL has built a great set of cryptographic libraries. The link for this article located at UnixReview is no longer available. . OpenSSL resembles a versatile Lego set, enabling the assembly of secure communication structures from its diverse components, like encryption algorithms and keys.. OpenSSL Toolkit, Cryptography Libraries, SSL/TLS Security. . LinuxSecurity.com Team
Jun 27, 2002
•
Cryptography
67
encryptionapacheauthenticationUnderstanding SSL And TLS Configuration In Apache Web Server
Secure Sockets Layer (SSL), developed by Netscape Communications, and Transport Layer Security (TLS), the open-standard replacement for SSL from the Internet Engineering Task Force, are the two protocols that add encryption and authentication to TCP/IP. This article summarizes the basic concepts . . . . Secure Sockets Layer (SSL), developed by Netscape Communications, and Transport Layer Security (TLS), the open-standard replacement for SSL from the Internet Engineering Task Force, are the two protocols that add encryption and authentication to TCP/IP. This article summarizes the basic concepts of how the two protocols work and how Apache implements these protocols so that one can transmit information securely over HTTP. . SSL and TLS are essential cryptographic protocols ensuring secure communication over a network. This article explores their integration with Apache for enhanced security.. SSL, TLS, Apache Configuration, Secure HTTP, Encryption Methods. . LinuxSecurity.com Team
Apr 22, 2002
•
Cryptography
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Explore top 10 tips to secure your open-source projects now. Read More