Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 14 articles for you...
209
security featurescustomizationweb hostingWhy Linux Hosting Outperforms Windows Hosting Options and Alternatives
Linux prevails as the clear choice for web hosting due to its security, compatibility, customization and cost-efficiency. . The 21st century has seen the rapid digitization of life. All things within daily life – be it shopping or eating out or commuting, technology and computers have a role in enabling almost all of these activities. Different countries, organizations and people collaborate on the internet and contribute to a better working world. And the internet works with the use of computers called servers or hosts. Humans interact with computers with the help of operating systems. The importance of Linux reseller hosting stems from the fact a big chunk of the internet (websites) is up and running, thanks to cheap Linux reseller hosting. The link for this article located at NerdsMagazine.com is no longer available. . Explore the reasons that make Linux hosting superior to Windows in terms of security, flexibility, and affordability for online services.. Linux Hosting, Web Hosting Solutions, Cost-Effective Hosting. . Brittany Day
Mar 30, 2021
•
Security Trends
67
data breachsecurity riskattack methodXML Encryption Flaw Exposes Web Services To Security Risks
Watch your Web Services: the official XML Encryption Syntax and Processing standard can be broken. So say two researchers from Ruhr-University Bochum in Germany, who have demonstrated a practical attack against XML's cipher block chaining (CBC) mode. . "We were able to decrypt data by sending modified ciphertexts to the server, by gathering information from the received error messages," according to a statement released by the researchers, Juraj Somorovsky and Tibor Jager. They presented their findings in detail at last week's ACM Conference on Computer and Communications Security in Chicago. The link for this article located at Information Week is no longer available. . Experts uncover a weakness in JSON encryption that puts online services at risk, outlining actionable exploits on networks.. XML Encryption, Web Services Security, Encryption Flaw, Data Breach, Attack Method. . LinuxSecurity.com Team
Oct 25, 2011
•
Cryptography
74
application securitysystem securityweb servicesExploring Security Risks in Service-Oriented Architecture Integrations
"Extensible Markup Language (XML), Web services, and service-oriented architecture (SOA) are the latest craze in the software development world. These buzzwords burn particularly bright in large enterprises with hundreds or thousands of systems that were developed independently. If these disparate systems can be made to work together using open standards, a tremendous amount of time, money, and frustration can be saved. Whether or not we are on the verge of a new era in software, the goal alone is enough to make security people cringe. It might be easy to glue System A and System B together, but will the combination be secure? Have you ever used or developed a SOA application? If so, you might be interested in this article that talks about some security concerns with it. . The link for this article located at cgisecurity is no longer available. . The link for this article located at cgisecurity is no longer available.. 'extensible, markup, language, (xml), services, service-oriented, architecture, (soa). . Bill Locke
Nov 03, 2008
•
Network Security
78
security frameworksecure applicationsweb servicesImproving Web Services Safety Through OpenLiberty-J Framework
OpenLiberty-J is based on J2SE, and open source XML, SAML, and web services libraries from the Apache Software Foundation and Internet2, including OpenSAML, a product of the Internet2 Shibboleth project. The library implements the Liberty Advanced Client functionality of Liberty Web Services standards This company provides a development architecture explicitly focusing on the deployment of secure practices for Web 2.0 Applications and development. Is this the best way to leverage web service security? . The link for this article located at Net-security.org is no longer available. . OpenLiberty-J is a cutting-edge framework enhancing web service security through open source technologies and features like role-based access control and advanced authentication. OpenLiberty-J, Security Frameworks, Web Services Security. . LinuxSecurity.com Team
Mar 11, 2008
•
Vendors/Products
74
security advisoryCiscoweb servicesCisco: Reactivity Acquisition Strengthens Web Services Security
Cisco's acquisition of XML vendor Reactivity today could set the stage for a new approach in handling the Web services security problem, experts say. Cisco announced its intent to acquire privately held Reactivity, a maker of specialized XML processing hardware, for $135 million this morning. On the surface, the deal looks like a simple play for the networking giant to incorporate Web services capabilities into its hardware lines, but security experts inside and outside Cisco say there may be more to it than that. . The Reactivity technology will eventually be built into the Cisco security architecture, so that application-to-application controls can be implemented along with user-to-application controls, says George Kurian, vice president and general manager for Cisco's Application Delivery unit. The link for this article located at darkReading is no longer available. . With the purchase of Reactivity, Cisco seeks to bolster the security of web services through the incorporation of XML capabilities into its infrastructure.. Cisco Networking, Web Services Security, Reactivity Technology, Application Control. . Bill Locke
Feb 23, 2007
•
Network Security
81
security issuespassword securityweb servicesExamining Weaknesses in Password Security Among Major Online Platforms
If you use any number of popular web forums or even some commercial services like classmates.com, amazon.com, netzero.com or your provider's webmail service, you may not be aware that you're sending your credentials over the internet in the clear. . Some sites appear to secure your credentials, but they really don't. Some offer SSL sign-ins, but don't make them the default. Others don't even make an attempt to use proper SSL encryption or any attempt to obscure the credentials. Remember the wall of sheep from DefCon? All of those people that kept logging into net resources assuming that nobody was listening? They were wrong! The link for this article located at ITtoolbox is no longer available. . Numerous platforms pledge to safeguard your information, but many neglect to implement adequate HTTPS encryption, putting your data at risk.. Password Security,SLL Protections,Web Encryption. . LinuxSecurity.com Team
Aug 22, 2006
•
Privacy
78
security toolssecurity analysisweb servicesWeb Services Testing Tools: Kenai Systems eXamine and eXamineST
Kenai Systems Inc., a maker of Web services vulnerability tools, today announced the release of two products: eXamine, and eXamineST. The products enable developers to import WSDL files and test them for Web services security vulnerabilities. . In October, Kenai released a free beta version of eXamine, which is a more general-purpose Web services inspection tool. EXamineST provides enhanced capabilities for inspecting and manipulating WSDL files, including support for OASIS' WS-Security specification and message validation. The tool is available as a standalone application and will eventually be available as an Eclipse plug-in. eXamineST, although containing features that were always on the Kenai product roadmap, was released a quarter earlier than originally anticipated, due to customer feedback resulting from the beta test of eXamine, said Bill Kesselring, CEO of Kenai Systems. "We took what we learned in beta, particularly the things we learned about the adoption of the WS-Security specification," said Kesselring. Said Jack Quinnell, CTO of Kenai Systems, "we accelerated release of many of the more advanced features in eXamineST due to customer demand." The link for this article located at Web Services Pipeline is no longer available. . TechGuardian Solutions has unveiled eShield and eShieldPRO to improve the analysis of application security flaws.. Web Services Testing, Kenai Systems, eXamine Tools. . LinuxSecurity.com Team
Dec 16, 2004
•
Vendors/Products
78
network securitysoftware updateaccess controlNovell Identity Manager Update Boosts Network Security with Integration
Novell is integrating its identity management and Web services software in a way that it says will ease customers' ability to secure corporate networks. . . .. Novell is integrating its identity management and Web services software in a way that it says will ease customers' ability to secure corporate networks. The company on Wednesday released Nsure Identity Manager 2, an update to its server software for authenticating access to networks and managing user passwords. Next week, Novell is expected to release exteNd Suite 5, the latest edition of its Java-based server software and Web services development tools. Although the two remain separate products, Novell's plan is to steadily improve the integration between them. The company has created a single organization to develop both products, and sees a growing demand for tools to build Web services applications that depend on corporate-wide security systems, according to Novell executives. "Everybody is trying to make Java tools easier for Java programmers. We want to make Web services and identity management accessible to mainstream business analysts and systems administrators," said Frank Auger, vice president of product management for Novell exteNd and Nsure products. . Novell is integrating its identity management and Web services software in a way that it says will e. novell, integrating, identity, management, services, software. . LinuxSecurity.com Team
Jan 15, 2004
•
Vendors/Products
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!