Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 3 articles for you...
83
voipsecurity threatsecurity measureColumbia Researcher Discusses VoIP Firmware Threats and Security Measures
Ang Cui. The Columbia University PhD candidate The link for this article located at ThreatPost is no longer available. . An Ivy League aspirant emphasizes the importance of enhancing embedded system security protocols. Discover further insights into VoIP vulnerabilities.. VoIP Security, Firmware Risks, Cyber Research. . LinuxSecurity.com Team
Dec 19, 2012
•
Hacks/Cracks
83
hackingsecurity breachvoipRobert Moore’s $1 Million VoIP Heist Using Brute-Force Attacks
Robert Moore, a 23-year old hacker from Washington, summarizes his $1 million heist of VoIP minutes. His methods involved brute-force attacks against Cisco XM routers and Quintum Tenor voice gateways in order to gain access and route calls through them. Just to clarify (FTA) - the attacks could easily have been prevented if the default passwords were changed on the routers. Even so, read on to find out how he confused the intrusion detection systems, how he gained the address to attack, and how he knew which attacks to send to which ports. . The link for this article located at Network World is no longer available. . Uncover the story of how a cybercriminal orchestrated a $1 million VoIP scam by deploying brute-force tactics and sidestepping protective measures.. VoIP Security,Hacking Techniques,Service Provider Breach. . LinuxSecurity.com Team
Aug 10, 2007
•
Hacks/Cracks
83
malwareinstant messagingtrojanSkype Worm Spreading Trojan: Email Harvesting And Click Fraud
A worm targeting Skype's VoIP application is harvesting e-mail addresses and directing users to a range of sites hosting other malicious software, security vendors said Monday. Once a machine is infected, the worm sends a malicious link via instant messages to other users in person's Skype contact list, according to F-Secure's blog. . The link leads to an executable file that downloads a Trojan horse capable of downloading other malicious software, F-Secure said. It then shows a photo of a "lightly dressed" woman. The link also directs users to at least eight Web sites with information about Africa. It's not clear what type of scam or harm those pages intend, but some of the sites have advertising on them, indicating that it might be a click-fraud scam, said Graham Cluley, senior technology consultant for Sophos. Click fraud refers to the various tricks used to get clicks on advertising banners, which generate revenue for Web page owners. The link for this article located at NetworkWorld is no longer available. . The link leads to an executable file that downloads a Trojan horse capable of downloading other mali. targeting, skype's, application, harvesting, e-mail, addresses, directing, users. . LinuxSecurity.com Team
Apr 16, 2007
•
Hacks/Cracks
81
data breachsocial engineeringattackVishing and VOIP: Emerging Threats and Essential Security Tactics
VOIP's anonymous nature may be convenient, but it can also be used against you. Secure Computing today warned of a new phishing exploit on the loose -- dubbed "vishing" -- that uses voice-over-IP and good old-fashioned social engineering. . Santa Barbara Bank & Trust and PayPal were the first to fall prey to vishing, where an attacker telephones a credit-card customer automatically, with a war dialer or directly, and dupes him or her into revealing account information by claiming there's been fraudulent activity on their account. The victim is then instructed to dial a "bad" phone number that then prompts them to enter their account number. The link for this article located at Dark Reading is no longer available. . Santa Barbara Bank & Trust and PayPal were the first to fall prey to vishing, where an attacker tele. voip's, anonymous, nature, convenient, against, secure, computing. . LinuxSecurity.com Team
Jul 18, 2006
•
Privacy
74
voipsecurity hazardphone networkVoIP Security Risks: Protecting Your Phone Network Efficiency
Imagine that you deliver an application with 100%, instant-on availability. Security is rock-solid. Costs are dropping. Users never complain. And anytime you upgrade, even if you buy software and gear with new features from a different vendor, user acceptance is always immediate and training virtually nil. . That's your phone system. And VoIP threatens to break it by opening your phone network to the profusion of security hazards your IT environment faces. That's not to say our POTS (plain old telephone service) is unbreakable. One of the legends of hacking is Cap'n Crunch, who got his nickname from decoding the audible signals on phones by using a whistle from a box of the cereal. The hackers who followed in his footsteps didn't break into POTS for the free long-distance service. They did so to access the computers connected to it. But they don't need POTS any longer; they've got the Internet now. So users have been able to ring you up when their systems have crashed after someone let loose variants of the SoBig or Klez viruses on your network. But with VoIP, users might not even be able to do that, since its infrastructure is vulnerable to the same attacks by the world's bottomless pit of sociopathic hackers. The link for this article located at Mark Hall is no longer available. . Voice over IP (VoIP) systems can jeopardize your telecommunications by making them susceptible to various network threats and security breaches.. VoIP Security, Network Risks, Phone System Vulnerabilities. . Joe Shakespeare
Jan 18, 2005
•
Network Security
74
security measuresnetwork architecturevoipExtreme Networks Revamps VoIP Security With New Aspen Switches Architecture
With the launch of its Aspen 8800 enterprise LAN switches, Extreme Networks Inc. is challenging network designers to rethink the way they build systems to deal with voice traffic and growing internal security threats. . With the rise of VOIP (voice over IP) and the exponential growth of malicious traffic, Extreme officials said they believe the requirement for voice-quality connections, continuous uptime and stronger security suggests that a two-tier network architecture must replace today's more prevalent three-tiered designs. "We think less is more. That way, you make fewer hops and have fewer moving parts," said Varun Nagaraj, vice president of product management at the Santa Clara, Calif., company. "The tier that faces the user is the unified access tier or layer—the user- or device-facing side. Then there is the core of the network, where the data center servers connect and where you connect to the WAN." The Aspen 8800 Series, with Extreme's new, more modular ExtremeWare XOS operating system, addresses the unified access layer. The switches allow a more robust edge network to be built, overcoming deficiencies in performance and availability that have existed in typical edge switches, Nagaraj said. The link for this article located at Paula Musich is no longer available. . Amid the surge in remote communications and increasing cyber threats, Cisco Systems is transforming cybersecurity protocols.. VoIP Security, Aspen Switches, Network Design, Malicious Traffic. . Joe Shakespeare
Jan 11, 2005
•
Network Security
74
voiptelecommunicationscommunicationEmpowering VoIP Management Using SIP For Enhanced Communication
Imagine if your Voice over IP (VoIP) (define) phone administration was as easy as using the Web. No more dropped connections, insecure sessions, lack of integration, or dependence on one vendor for systems. With Session Initiation Protocol (SIP), the long awaited promise of unified messaging may finally come true. No, SIP is not the latest in silly soft drinks; it is the latest . . .. Imagine if your Voice over IP (VoIP) (define) phone administration was as easy as using the Web. No more dropped connections, insecure sessions, lack of integration, or dependence on one vendor for systems. With Session Initiation Protocol (SIP), the long awaited promise of unified messaging may finally come true. No, SIP is not the latest in silly soft drinks; it is the latest emerging standard to address how to combine data, voice and mobility into one neat package. With its simple and integrated approach to session creation, SIP has the potential to transform how companies do business. For the past few years VoIP has been quietly changing the delivery of telecommunications services. Most of the major telecoms have been upgrading their internal backbone networks to rely on IP (define) as a replacement for the older switching technologies. The administrative simplification and cost savings of merging data and communications networks into a seamless whole is compelling for any company. Given all the great advantages, why hasn't everyone switched to the new technology? The biggest reason why the convergence has not happened faster has been a lack of tools and standard protocols for establishing network connections. The result is that many existing market products use proprietary protocols to create the network sessions. This means that users must purchase all their equipment from one vendor for assured end-to-end connectivity; plus the systems tend to be single function, thus limited in their use. The link for this article located at Beth Cohen is no longer available. . Uncover the transformative potential of SIP inenhancing VoIP communications, streamlining unified messaging solutions, and optimizing telecom operations.. VoIP Communication,SIP Protocol,Telecommunications Standard,Unified Messaging. . Anthony Pell
Sep 01, 2004
•
Network Security
83
securityvoiptelephonyUnderstanding Automated Caller ID and ANI Spoofing in VoIP Security
What is ANI / Caller ID spoofing? ANI / Caller ID spoofing is setting the ANI / Caller ID on the outgoing call you are making to a 10 digit number of your own choosing. Traditionally it has been a complicated process either requiring the assistance of a cooperative phone company operator or an expensive company PBX system. . . .. What is Caller ID? Caller ID is a service provided by most telephone companies (for a monthly cost) which will tell you the number / name of an incoming call. [Definition: Hack FAQ ] What is ANI? Automatic Number Identification is a system used by the telephone company to determine the number of the calling party. There are believed to be two types, "FLEX ANI" (used for e.g. verification services such as voicemail) which is relatively easy to spoof, and "Real Time ANI" (used only for billing purposes on e.g. 800 numbers) which is harder to spoof. [Definition: Hack FAQ ] What is ANI / Caller ID spoofing? ANI / Caller ID spoofing is setting the ANI / Caller ID on the outgoing call you are making to a 10 digit number of your own choosing. Traditionally it has been a complicated process either requiring the assistance of a cooperative phone company operator or an expensive company PBX system. What is Automated ANI / Caller ID spoofing? Automated ANI / Caller ID spoofing is setting the number you are calling from without the use of an operator / company PBX system. By far the easiest method thanks to the increasing take-up of internet telephony services are VoIP (Voice over Internet Protocol) service providers who allow you when using their service to set whatever caller ID you like (which is also used as ANI). The link for this article located at rootsecure.net is no longer available. . Explore the complexities of Automatic Number Identification (ANI) and Caller ID spoofing, revealing key secure calling practices used in Voice over Internet Protocol (VoIP) systems. Telephony Spoofing, ANI Spoofing, VoIP Security. . LinuxSecurity.com Team
Jul 09, 2004
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!