Thank you for reading our Linux Security Week newsletter! In this weekly newsletter, we strive to provide readers with a comprehensive overview of the week's most relevant open source security news. We want to provide you with the type of content you are interested in, and would love to hear your thoughts on this week's articles.

Today’s newsletter highlights our two most recent feature articles: Protect Your WordPress Sites with CrowdSec and Cybersecurity World Mourns Over Security Researcher Dan Kaminsky's Passing. We also examine various topics including the banning of the University of Minnesota from Linux kernel development after researchers tried to slip bad patches into the Linux kernel as a "test", and some excellent alternative free and secure Linux distros to consider as a CentOS replacement. Happy Monday - and happy reading!

Yours in Open Source,

Brittany Signature 150


LinuxSecurity.com Feature Extras:

Protect Your WordPress Sites with CrowdSec - The CrowdSec team is expanding the capabilities of their open-source and free security solution by finalizing the release of its brand new application bouncer on the WordPress marketplace. 

Cybersecurity World Mourns Over Security Researcher Dan Kaminsky's Passing - On Saturday, April 24th, 2021, the computer security world was shaken by the news of the sudden death of Dan Kaminsky, a renowned hacker best known for his contributions in the realm of DNS security.


  Greg Kroah-Hartman bans University of Minnesota from Linux development for deliberately buggy patches (Apr 22)
 

Some researchers from the University of Minnesota tried to slip bad patches into the Linux kernel as a "test." When they kept trying, Greg Kroah-Hartman, the Linux kernel maintainer for the stable branch, put an end to their efforts by banning their university from Linux development.

  Looking for a CentOS Replacement? Start Here (Apr 20)
 

Looking for a replacement for CentOS, the free-to-use downstream clone of RHEL that Red Hat is no longer supporting? Here are some alternative free and secure Linux distros to consider.

  Google issues Chrome update patching seven security vulnerabilities (Apr 21)
 

Google has released  version 90.0.4430.85  of the Chrome browser with seven security fixes, including one for a zero-day vulnerability that was exploited in the wild.

  Parrot OS Security edition is a Linux desktop distribution geared for security admins (Apr 23)
 

Parrot OS Security edition is a is a Linux desktop distro geared towards security admins, offering a wide range of penetration and vulnerability testing tools.

  Graphical Linux apps are coming to Windows Subsystem for Linux (Apr 23)
 

Microsoft has  launched  support for graphical and audio Linux apps under the Windows Subsystem for Linux"although the new feature is only available in the Dev channel of Insider builds, for now. The new feature is nicknamed WSLg, and it includes both X and PulseAudio servers.

  Camera hack peels back layers of embedded Linux (Apr 21)
 

Embedded Linux devices are everywhere these days, and sooner or later, youre going to want to poke around in one of them. But how? Learn the techniques and tools Felipe Astroza has used to hack the Foscam C1 security camera, which will work on a wide range of embedded Linux gadgets.

  Rust support in Linux may be possible by 5.14 release: Torvalds (Apr 19)
 

The first patches for Rust support in the Linux kernel have been posted and Linus Torvalds says that things are "getting to the point where maybe it might be mergeable for 5.14 or something like that". In Torvalds' opinion, the fact that these are being discussed is much more important than a long post by Google about the language.

  Tails 4.18 Anonymous OS Released with Tor Browser 10.0.16, Updated Intel Firmware (Apr 22)
 

The Tails amnesic incognito live system (a.k.a. anonymous OS) has been updated to version 4.18, featuring a selection of bug fixes and improvements including Tor Browser 10.0.16 and updated Intel firmware.

  How to check if a port is open on remote Linux system (Apr 20)
 

Learn three methods you can use to check if a network port is opened or closed on a remote Linux system in this tutorial.

  6 advanced tcpdump formatting options (Apr 19)
 

Learn six advanced tcpdump packet capturing trick options to make your network packet captures more useful in this tutorial.

  How open source security flaws pose a threat to organizations (Apr 20)
 

A majority of the open source codebases found in commercial applications analyzed by Synopsys contained security vulnerabilities.