Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 9 articles for you...
83
encryptionsecurity researchcryptographyUnlocking Unix: Enthusiasts Crack Historic Passwords with DES
Old passwords never die – they just become easier to decode. That’s the message from a tight-knit community of tech history enthusiasts who have been diligently cracking the passwords used by some of the original Unix engineers four decades ago. Learn more: . On 3 October, an enthusiast on the Unix Heritage Society mailing list asked a question about cracking passwords stored in old Unix systems. The source code for various revisions of Unix from the seventies onward is available online for anyone to download, and these revisions store the passwords for various staff members in the etc/passwd file. Unix hashed these passwords by running them through an algorithm called descrypt (also known as crypt(3)), which used the original DES encryption algorithm and limited the password length to eight characters. This was good enough to stop people recovering the password from the original hashes at the time, but 40 years on, computers are a little bit faster. The link for this article located at Naked Security is no longer available. . Uncover how aficionados are deciphering Unix passcodes, shedding light on legacy frameworks and their relevance to contemporary cybersecurity challenges.. Unix Cracking, Password Security, DES Encryption, Tech History. . LinuxSecurity.com Team
Oct 14, 2019
•
Hacks/Cracks
77
security advisorycriticalapacheApache 2.4.39 Security Advisory: Critical Root Access Exploit Fixed
This week, the Apache Software Foundation has patched a severe vulnerability in the Apache (httpd) web server project that could --under certain circumstances-- allow rogue server scripts to execute code with root privileges and take over the underlying server. . The vulnerability, tracked as CVE-2019-0211, affects Apache web server releases for Unix systems only, from 2.4.17 to 2.4.38, and was fixed this week with the release of version 2.4.39. According to the Apache team, less-privileged Apache child processes (such as CGI scripts) can execute malicious code with the privileges of the parent process. The link for this article located at ZDNet is no longer available. . Critical vulnerability fixed, possibly allowing unauthorized root access through CGI scripts on UNIX-based Apache servers.. Apache Vulnerability, Critical Patch, Web Server Security, UNIX Exploit, Root Access Risk. . LinuxSecurity.com Team
Apr 03, 2019
•
Server Security
81
networkingsoftwarelinuxOpenVPN Installation Guidelines for Linux and Unix Systems
Installing OpenVPN is easy and platform independent. Modern Linux systems, such as SuSE, Red Hat, Debian, or Ubuntu, provide sophisticated installation and package management systems, and still offer other ways to install the software. In this two-part article by Markus Feilner, we will install it on different Linux versions and FreeBSD.. All Linux/Unix systems must meet the following requirements to install OpenVPN successfully: Your system must provide support for the Universal TUN/TAP driver. The kernels newer than version 2.4 of almost all modern Linux distributions provide support for TUN/TAP devices. Only if you are using an old distribution or if you have built your own kernel, will you have to add this support to your configuration. This project's web site can be found at https://vtun.sourceforge.net/tun/. OpenSSL libraries have to be installed on your system. I have never encountered any modern Linux/Unix system that does not meet this requirement. However, if you want to compile OpenVPN from source code, the SSL development package may be necessary. The web site is https://www.openssl.org:443/. The Lempel-Ziv-Oberhumer (LZO) Compression library has to be installed. Again, most modern Linux/Unix systems provide these packages, so there shouldn't be any problem. LZO is a real-time compression library that is used by OpenVPN to compress data before sending. Packages can be found on https://openvpn.net/community/ and the web site of this project is http://www.oberhumer.com/opensource/lzo/. The link for this article located at PactPub is no longer available. . All Linux/Unix systems must meet the following requirements to install OpenVPN successfully: Your sy. installing, openvpn, platform, independent, modern, linux, systems. . LinuxSecurity.com Team
Dec 05, 2009
•
Privacy
77
security risksthreat mitigationsecurity strategyAddressing SSH Security Vulnerabilities in UNIX Operating Systems
This article is a follow-up to my earlier article on SSH security considerations, in which I discussed some very real risks with SSH. Safari has some excellent online books available that cover the VPN aspects in much more depth than I can address in this space, as well as supplemental articles and other resources that can help you to better understand how SSH works and how to create the ultimate SSH technical security plan. This article will help the UNIX administrator The link for this article located at InformIT is no longer available. . Safari has some excellent online books available that cover the VPN aspects in much more depth than . article, follow-up, earlier, security, considerations, which, discuss. . LinuxSecurity.com Team
Aug 28, 2006
•
Server Security
77
integrationauthenticationwindowsIntegrating Linux Authentication With Windows Active Directory
One of the main problems with UNIX/Windows environments is the lack of integration between the two platforms. Userids have to be created separately on each environment, passwords changed separately, etc. This doubles administrative work. This paper will explore using one of several different ways that you can active directory integrate your LINUX boxes to your windows AD forest. This document will give you integration between your linux boxes and your Windows AD forest. Additionally, it will allow you to control who can login to the LINUX boxes by group memberships within Active Directory. It will give you full . The link for this article located at InfoSec Writers is no longer available. . Integrating Linux with Windows Active Directory (AD) allows unified authentication and easier user management, ensuring security across diverse networks. Here's how to do it:. Linux Authentication, Active Directory Integration, User Management. . LinuxSecurity.com Team
Aug 22, 2006
•
Server Security
74
network securitylinuxcyberattack2004 Cyberattack Risks: RPC Vulnerabilities for Unix and Linux
The New Year will offer weary network administrators little respite from a new generation of Internet worms, viruses and targeted hacks that appeared in 2003, according to security experts. While many of those attacks will target Microsoft operating systems, malicious hackers may also look for ways to exploit RPC security holes in Unix and Linux. . . .. The New Year will offer weary network administrators little respite from a new generation of Internet worms, viruses and targeted hacks that appeared in 2003, according to security experts. In 2004, malicious hackers will continue to take advantage of security weaknesses in popular communications protocols such as Remote Procedure Call (RPC), while improvements in hacker tools will shorten the time that technology vendors and their customers have to respond to new vulnerabilities, according to comments by leading security researchers and corporate security experts at the InfoSecurity 2003 Conference and Exhibition in New York City Wednesday. The experts, including chief security officers from eBay Inc. and Siebel Systems Inc., took part in a panel discussion of security vulnerabilities and so-called "zero-day" exploits -- vulnerabilities that are exploited by attackers before software patches have been issued. Attacks that take advantage of holes in RPC will continue next year, according to Gerhard Eschelbeck of security company Qualys Inc. RPC vulnerabilities in Microsoft Corp.'s products were behind recent worms such as Blaster and Welchia, which spread worldwide in August. While many of those attacks will target Microsoft operating systems, malicious hackers may also look for ways to exploit RPC security holes in Unix and Linux, he said. . Cybersecurity analysts predict a rise in digital threats in 2024, focusing on Windows and Mac systems exploiting SMB weaknesses.. Cyberattack Forecasting, RPC Vulnerabilities, Internet Security Threats. . Anthony Pell
Dec 31, 2003
•
Network Security
76
buffer overflowsoftware enhancementsecurity improvementOpenBSD Anticipates Major Changes to Combat Buffer Overflows
The OpenBSD project hopes new changes to its latest release will eliminate "buffer overflows," a software issue that has been plaguing security experts for more than three decades.. . .. The OpenBSD project hopes new changes to its latest release will eliminate "buffer overflows," a software issue that has been plaguing security experts for more than three decades. Theo de Raadt, the project leader for the group, believes that the group's latest improvements to the Unix variant, due to be released on May 1, will make causing a buffer overflow extremely difficult, if not impossible. A buffer overflow is a memory error in software that allows an attacker to run a malicious program. "I could say that I am killing buffer overflows, but I am in the security community, so I have to put it in quotes," he told attendees at the CanSecWest security show on Thursday. Theo de Raadt, the project leader for the group, believes that the group's latest improvements to the Unix variant, due to be released on May 1, will make causing a buffer overflow extremely difficult, if not impossible. A buffer overflow is a memory error in software that allows an attacker to run a malicious program. "I could say that I am killing buffer overflows, but I am in the security community, so I have to put it in quotes," he told attendees at the CanSecWest security show on Thursday. The link for this article located at CNET is no longer available. . The FreeBSD developers are committed to removing memory leaks through innovative coding practices in their forthcoming version.. OpenBSD Security, Buffer Overflows, Unix Memory Error. . Anthony Pell
Apr 11, 2003
•
Organizations/Events
83
security advisorysecurity issuemalwareGobbles Security: Trojan Horse Threat Revealed Amid Antipiracy Hoax
A wisecracking group of hackers confirmed its claim this week that it spread an antipiracy virus was nothing but a hoax aimed at garnering fame. But members of the group, known as Gobbles Security, conceded that a program it released . . . . A wisecracking group of hackers confirmed its claim this week that it spread an antipiracy virus was nothing but a hoax aimed at garnering fame. But members of the group, known as Gobbles Security, conceded that a program it released to demonstrate the problem was a Trojan horse capable of destroying files on the computers of unwary Unix users. Experts said the bizarre incident, which caused a brief frenzy among some security firms and fans of music file sharing, follows a grand tradition of pranks by the playful hacking group. "I think that the latest Gobbles advisory is genius," said Dave Aitel, head of Immunity Security, a security software and services provider. "Gobbles takes the piss out of all of us, and we need to respect and appreciate that." The link for this article located at WiredNews is no longer available. . A wisecracking group of hackers confirmed its claim this week that it spread an antipiracy virus was. wisecracking, group, hackers, confirmed, claim, spread, antipiracy, virus. . LinuxSecurity.com Team
Jan 16, 2003
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!