Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
83
malwarecyber crimeattack techniquesVermilion Strike: New Linux Cobalt Strike Port Boosts Attack Capabilities
Hackers have developed a Linux port of the Cobalt Strike penetration testing toolkit dubbed Vermilion Strike to evade malware detection. . Cyber criminals have developed a Linux port of the Cobalt Strike penetration testing tool that has been dubbed Vermilion Strike, security researchers have discovered. The tool has been developed from scratch to avoid detection from malware scanners. According to a report published by cloud security firm Intezer Labs, researchers last month discovered a fully undetected ELF implementation of Cobalt Strike’s beacon . The malware used Cobalt Strike’s Command and Control (C2) protocol when communicating to its C2 server and has remote access capabilities such as uploading files, running shell commands, and writing to files. . Hackers have developed a Linux variant of Cobalt Strike, upgrading their malware avoidance strategies with additional features.. Linux Port Cobalt Strike, Vermilion Strike, Malware Evasion, Penetration Testing Toolkit, Cyber Crime. . LinuxSecurity.com Team
Sep 14, 2021
•
Hacks/Cracks
79
malwaresecurity researchthreat assessmentUnderstanding Linux Malware Through VirusTotal Insights and Assessments
The rise of malware designed to infect Linux servers' distributed denial-of-service attacks has earned greater attention from VirusTotal, the Google-owned go-to tool for malware hunters. For security researchers that need to stay on top of emerging malware threats, the VirusTotal malware database has become an integral tool.. Anyone can upload a suspicious file to the web tool to check whether the dozen or so antivirus engines, such as Kaspersky, McAfee, Symantec, and other equivalents, detect it as malware. The tool is meant for good guys, but as one researcher found last year, black hat hackers were also using the service to test their malware against antivirus products prior to releasing it in the wild - despite the tool's shortcomings for comparative analysis. The link for this article located at ZDNet Blogs is no longer available. . Explore the ways in which ThreatTracker supports analysts in tackling new Linux malware challenges and scrutinizing server infiltration pathways.. Linux Malware, VirusTotal Detection, Server Security Insights. . LinuxSecurity.com Team
Nov 12, 2014
•
Security Projects
77
access controlsecurityfirewallEssential Linux Admin Tools for Enhancing Security on CentOS System
Most Linux distributions have a significant focus on security. This does not mean they are necessarily ready for production out of the box. Tools like SELinux, excellent firewall options, and robust access controls can make Linux exceptionally secure. . Despite this, actually deploying a Linux system into production still requires that the systems administrator have some idea what they are doing. Let's use my favourite distribution, CentOS, as an example. (CentOS is a near-identical repackaging of Red Hat Enterprise Linux.) By default, SELinux is turned on. In most situations, this is a great thing; SELinux provides a layer of sandboxing so that applications of a certain class can't impinge upon files belonging to applications or users of another class. The link for this article located at The Register UK is no longer available. . Despite this, actually deploying a Linux system into production still requires that the systems admi. linux, distributions, significant, focus, security, necessari. . LinuxSecurity.com Team
Jul 23, 2012
•
Server Security
79
malwarerootkitprotectionInnovative Hypervisor Tool For Rootkit Defense and Protection
Researchers at North Carolina State University and Microsoft Research have come up with a way to combat rootkits by using the machine's own hardware-based memory protection: the so-called HookSafe tool basically protects the operating system kernel from rootkits.. Rootkits are the most difficult of malware to detect and remove: they often evade detection by anti-malware software, and even if they are discovered, they can still be difficult to completely eradicate. A rootkit typically hijacks "hooks" in the operating system -- basically the control data in the kernel used to augment or extend the features of an OS -- in order to hide out in the OS. This in turn lets the rootkit intercept and manipulate the system's data, remain invisible to the user and anti-malware tools, and to install other malware aimed at stealing data from the system. "Then the rootkit can hijack and manipulate the results seen by the user applications ... only allowing a user to see what it wants them to see," says Xuxian Jiang, assistant professor of computer science at NC State and a member of the research team. The link for this article located at Dark Reading is no longer available. . Uncover the innovative approach taken by scientists to create a solution employing hardware memory safeguards aimed at counteracting rootkit threats.. Rootkit Protection Tools, Hardware Memory Defense, Malware Detection System. . LinuxSecurity.com Team
Nov 04, 2009
•
Security Projects
83
threatmalwarevulnerabilityEmerging JavaScript Tool Poses Significant Threat to Browser Security
A new tool too dangerous to give away can turn any PC. After silently inserting itself to run inside any browser The link for this article located at eWeek is no longer available. . An application surfaces that can stealthily transform any web browser with JavaScript support into a harmful agent, presenting considerable dangers.. JavaScript Threat, Malware Tool, Browser Security Issue, Cyber Attack Software. . LinuxSecurity.com Team
Mar 28, 2007
•
Hacks/Cracks
74
threat detectionmalware defensetechnologyRevolutionary Malware Defense Tool Improves Cybersecurity Solutions
London . The link for this article located at SourceWire is no longer available. . Delve into an innovative solution that adeptly fights off malware dangers with accuracy and effectiveness.. Robot Code Cracker, Malware Defense, Cybersecurity Tool. . Bill Locke
Feb 03, 2007
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!