Network Security
system security Linux network
system security Linux network The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
May 26, 2026
Server Securityopen-source Linux administration
open-source Linux administration Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
May 25, 2026
Vendors/Productssecurity breach linux
security breach linux A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
May 21, 2026
Security Trends access control multi-tenant
access control multi-tenant Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
May 21, 2026
Vendors/Productsincident response cloud security
incident response cloud security Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
May 19, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security news
We found 9 articles for you...
78
security advisoryserver configurationweb applicationsTurnkey Linux 14 Enhanced TLS Security for Improved Web App Safety
Turnkey has improved SSL/TLS security. The net result is that TurnKey appliance's overall administrator tools, Webmin and Webshell, are now hidden behind stunnel using TLS. In addition, the three supported web servers used across appliances (Apache, LigHTTPd and Nginx) are now configured to use consistent hardened TLS cipher suite and settings. The Tomcat JavaServer also has hardened TLS settings. . As before, Turnkey continues to offer a wide variety of both popular and niche server programs. These include commonly used programs such as WordPress blogging, the Node.js Javascript runtime environment, and Drupal content management system (CMS) It also offers more exotic servers including Ushahidi crisis crowd-sourcing server; Zurmo, a gamified customer-relationship management (CRM) application; and Sahana Eden, a humanitarian response management system. . Explore the robust security features of Turnkey Linux 14, featuring TLS for secure communications, perfect for small businesses needing tailored server solutions. Turnkey Linux, TLS Security, Web Applications, Server Configuration. . LinuxSecurity.com Team
Mar 14, 2017
•
Vendors/Products
79
risk managementapplication securityweb applicationsInvesting in Application Security: Insights for CISOs on Rising Threats
According to the 2013 Chief Information Security Officers survey by the Open Web Application Security Project (OWASP), 75 percent of CISOs responded that external attacks had increased. When asked what the main areas of risk as percentage of the overall risk are, 70 percent of CISOs responded that web applications represent an area of risk higher than network infrastructure. - See more at: . The increased perception of threats and risks for applications shifts the organization investment from the traditional network security to application security: about 48 percent of CISOs have seen the investment in application security increasing as part of the company's annual budget, 37 percent consider it relatively constant and only 15 percent have seen a decrease. But this increased investment in application security brings new challenges for CISOs since securing web applications and software requires a different set of capabilities and skills outside the traditional information security domains. - See more at: The link for this article located at Network World is no longer available. . The increased perception of threats and risks for applications shifts the organization investment fr. according, chief, information, security, officers, survey, application, securit. . LinuxSecurity.com Team
Oct 08, 2013
•
Security Projects
72
network securitycyber crimefirewall challengesThe Evolving Threats of Facebook And Web Apps To Network Security
Traditional firewalls might not be enough, argues Palo Alto Networks founder Nir Zuk. The world is very different from the days when email ruled the roost and Yahoo, not Google, was the first search engine name that rolled off your tongue.. In 1995, the worst security threat was a virus on a floppy disk. But in 2011 the security landscape has completely changed; cyber crime is a huge industry and computers have the ability to bring down the networks of whole countries. The internet is not just web browsing and email any more, it's Facebook, Skype, Twitter and a multitude of other web applications.. In the 90s, the most daunting peril was a simple macro virus, yet today's digital realm faces a myriad of sophisticated cyber attacks.. Network Security, Web Threats, Cyber Crime, Social Media Risks. . Anthony Pell
Feb 21, 2011
•
Firewalls
67
encryption toolweb applicationsdata decryptionIntroduction to the Poet Tool and Its Use in Padding Oracle Attacks
Two researchers have released a tool which can be used to crack web server-encrypted session data contained in cookies and parameters hidden in HTML pages. The method used by Juliano Rizzo and Thai Duong's Padding Oracle Exploitation Tool (Poet) can also be used to crack CAPTCHAS.. Poet utilises the Padding Oracle AttackPDF, first discovered in 2002, to decrypt cypher block chaining (CBC) mode encrypted data without the key. Web applications such as those generated using the popular JavaServer Faces framework (JSF) are affected. The Padding Oracle Attack makes use of the fact that during encryption individual blocks must always be 8 or 16 bytes long. In order to meet this requirement it is usually necessary to pad out the final block with additional bytes. There are various methods of performing this padding, some of which facilitate cracking. This is where Padding Oracle The link for this article located at H Security is no longer available. . Poet utilises the Padding Oracle AttackPDF, first discovered in 2002, to decrypt cypher block chaini. researchers, released, which, crack, server-encrypted, session. . LinuxSecurity.com Team
Jun 09, 2010
•
Cryptography
78
secure operating systemLinux distributionweb applicationsGoogle Chrome OS Overview: Exploring Security Features and Cloud Focus
Unless you live in a cave, don't care at all about technology or have been distracted by Sarah Palin's publicity tour, you've probably heard that Google showed its Linux-based Chrome operating system to the world yesterday.. Google, a company born and bred on the Web, has a mighty challenge ahead of it getting into the PC business. Aware of this, Google does not have grand ambitions to take over PCs with Chrome. It's a browser and cloud-based OS for netbooks designed to be fast, simple and secure. Chrome will not support hard drives, only solid-state storage, and it will only run Web-based applications. There will be no desktop-type software programs allowed. As for security, if any application is in danger of being corrupted by malware, Chrome has been designed to reboot itself, after which a clean version of the OS is downloaded. Nearly all user data will be stored in the Google's cloud computing service and will be encrypted and sychronized constantly between the netbook and the cloud. The link for this article located at Network World is no longer available. . Google, a company born and bred on the Web, has a mighty challenge ahead of it getting into the PC b. unless, don't, about, technology, distracted, sarah, palin. . LinuxSecurity.com Team
Nov 23, 2009
•
Vendors/Products
77
application securitysecurity assessmentgoogleUtilizing Ratproxy for Comprehensive Web Application Security Evaluation
To help developers audit Web application security, Google has released an open source tool called ratproxy. It is a non-disruptive tool designed for Web 2.0 and AJAX applications that produces an easy-to-read report of potential exploits. Ratproxy is a local program designed to sit between your Web browser and the application you want to test. It logs outgoing requests and responses from the application, and can generate its own modified transactions to determine how an application responds to common attacks. The list of low-level tests it runs is extensive, and includes: Have you testing out ratproxy yet? If not this article will show you how to install and use it for your self.. The link for this article located at Linux.com is no longer available. . Uncover the potential of Ratproxy in enhancing the security evaluation of web applications through our detailed manual.. application security, google tools, ratproxy, web application testing. . LinuxSecurity.com Team
Jul 29, 2008
•
Server Security
77
security flawinput validationmitigationUnvalidated Input Threats In Web Applications: Mitigation Strategies
According to the OWASP Guide, unvalidated input is the most common weakness found in web applications. Tainted input leads to almost all other vulnerabilities in these environments (OWASP, 2005). Before we look at how to prevent this weakness from spreading throughout your web solutions, let. The link for this article located at Infosec Writers is no longer available. . Understand the impact of unverified input on web applications and explore successful mitigation techniques.. Web Application Security, Input Validation, OWASP Guide, Security Flaws. . LinuxSecurity.com Team
Jun 28, 2006
•
Server Security
77
testing methodssecurity toolsapplication testingExploring Effective Application Testing Tools And Techniques
Web application security is interesting to test, in particular because, unlike most network and operating system testing, most web applications are custom-built. Even when they’re not custom-built, there’s enough diversity out there that simply looking for known problems isn’t good enough. You need to review the application itself. . At one of my previous employers, we had a good system for reviewing all web applications with a couple of commercial scanner tools; applications could not be deployed into production until the results of those scans were acceptable. Application scanners do not, of course, catch everything — there are always esoteric conditions that are easily missed in automated tests. Manual testing has an important place in assessments. Automated testing, though, does have a number of advantages. The link for this article located at Caffinated Security is no longer available. . Thorough security evaluation of web applications necessitates both automated tools and human-led assessments to guarantee strong protection against unrecognized threats.. Web Application Testing, Security Tools, Application Scanning. . LinuxSecurity.com Team
Mar 09, 2006
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
Explore top 10 tips to secure your open-source projects now. Read More