Explore top 10 tips to secure your open-source projects now. Read More
×
Network Security
security advisory Ubuntu
security advisory Ubuntu Root access on a Linux system rarely arrives through a zero-day. . Honestly, it usually doesn't even arrive through something you'd consider clever. More often — and this shows up in post-incident report after post-incident report — an attacker gets a low-privilege foothold through a misconfigured web app or a reused credential, and then just looks around. What they find is a sudoers entry that's been sitting untouched since the last sysadmin handed off the server. Or a SUID binary a...
Jul 10, 2026
Security Vulnerabilities open-source dependency management
open-source dependency management Every Linux developer who works with Go has run the same workflow a thousand times. You find a library that solves your problem, you see a decent star count on GitHub, and you run go get. It is frictionless and efficient. Lately, however, it is becoming one of the most effective ways for an attacker to get code running on your build servers. The recent "Operation Muck and Load" campaign is a perfect example of why this workflow is risky. Researchers uncovered over 200 GitHub repositories...
Jul 10, 2026
Security Vulnerabilities security advisory unauthorized access
security advisory unauthorized access AI coding assistants have become a staple in many Linux developers' daily workflows. Whether you're generating boilerplate, refactoring code, or updating configuration files, it's easy to assume these tools stay safely inside your project directory. . Researchers recently pulled the curtain back on a threat they’ve dubbed " GhostApproval ." It’s a direct hit to the way we use tools like Cursor, Amazon Q, and Claude Code. They found these assistants have a dangerous blind spot: they can be...
Jul 09, 2026
Network Securitynetwork security firewall management
network security firewall management Linux runs a huge portion of today's infrastructure because it gives administrators an unusual amount of control over the system. That control extends to networking, where almost every aspect of packet flow, routing, filtering, and interface behavior can be customized. The trade-off is that very little of that hardening happens automatically. A fresh installation is usually built to communicate, not to isolate. . As environments grow, servers start exchanging data with monitoring platforms,...
Jul 08, 2026
Security Vulnerabilities security advisory authentication
security advisory authentication We often view OpenSSH security updates through the lens of standard patch management. When a new CVE hits, we scramble to update, check our versions, and return to business as usual. But recent vulnerabilities tied to distribution-added OpenSSH GSSAPI patches are a reminder that the danger doesn't always lie in the core code; it often resides in the "convenience" features we layer on top. . These recent issues shouldn't just trigger an apt upgrade or dnf update; they should trigger a...
Jul 06, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Loading...
Explore Latest Linux Security news
We found -4 articles for you...
83
malwaretrojanemail threatStorm Trojan Variant Spreading Through Email and Web Channels
A new variant of the "Storm" Trojan is injecting its come-on into blogs, Web-based message forums and Webmail as part of an effort to spread itself to an ever-widening net of PCs, according to a security researcher. Dmitri Alperovitch, principal research scientist at Secure Computing, said Tuesday that the Trojan best known as the "Storm worm" but also pegged as "Peacomm" and half a dozen other names by antivirus vendors -- is using a novel approach to spread. "This is a really neat twist, through the Web channel," said Alperovitch. . An initial infection is still carried out via e-mail, which touts a link that when clicked downloads a number of malware components to a victimized machine. Once on a PC, however, the malicious code injects itself into the network stack as a rootkit and analyzes all outbound Web traffic. The link for this article located at NetworkWorld is no longer available. . An initial infection is still carried out via e-mail, which touts a link that when clicked downloads. variant, 'storm', trojan, injecting, come-on, blogs, web-based, message, forums. . LinuxSecurity.com Team
Feb 28, 2007
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!