October 2020 Overview of Linux Security Updates and Reviews

Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

Which are the software world's most attacked applications? All applications are attacked to some extent but as time has gone on a favourite list has started to emerge based on two fundamental weaknesses: how widely used that application happens to be and how many software vulnerabilities, known and unknown, have been uncovered in it.

In modern enterprises, there's a similar perception of invulnerability. Yet, for every large organization that glides through the year without any mishaps, there are many stories about perilous break-ins, Wi-Fi sniffing snafus and incidents where Bluetooth sniper rifles were used to steal company secrets.

One of the big differences between Linux and Windows is that Linux users don't typically have "root," or administrator, access. That's a very good thing for security, and it's something you should take care to preserve by not running as root unnecessarily.

After some days with the latest Ubuntu Linux desktop release, I was planning to devote a few graphs to extolling its many virtues.

Of the 40,000 networks identified in the six cities, just under 20,000 had no password or the most basic form of security encryption, the research for card protection and insurance company CPP found.

The lack of a secured infrastructure is typically the reason hackers are able to gain access to enterprise servers and from there, implant malware to launch an attack, according to Verizon.

The best way to secure your business, so the advice of many an IT security consultant appears to increasingly be, is to think like a hacker. Only by understanding how the bad guys get at your data can you truly prevent them succeeding: to catch a hacking bird, you have to become a hacking bird.

A trojan recently analysed by Webroot is said to rely on retrieving web page passwords from a browser's password storage, rather than logging a user's keyboard inputs. To make sure it will find all the interesting passwords in Firefox, the malware, called PWS-Nslog, makes some changes to jog the browser's memory.

In the slowly recovering economy, telecommuting has become an essential way for businesses to retain valuable workers, increase productivity, and support "green" initiatives. But from a security perspective, telecommuting can also be dangerous -- if you don't have the right technologies in place.

IT reseller CDW LLC found that 25% of 7,000 customers polled had experienced a network disruption of four hours or more within the past year.

Policy group New America has written a scathing blog entry that criticizes the HTC G2 for including a "hardware rootkit" that prevents users from installing custom firmware on the device. The report appears, however, to be based on a misunderstanding of technical issues raised in an XDA discussion thread.

At the 2010 Hacker Halted Conference in Miami on October 13, 2010, SECNAP Network Security will demonstrate the ease with which cyber sniffers, eavesdroppers and hackers can intercept email messages, despite widespread user trust that email messages are private and secure.