Thank you for subscribing to our Linux Security Week newsletter! In this weekly newsletter, we strive to provide readers with a comprehensive overview of the week’s most relevant open source security news. We want to provide you with the type of content you are interested in, and would love to hear your thoughts on this week's articles.


Today’s newsletter highlights our two most recent feature articles: IoT Security Vulnerabilities are Ubiquitous: How To Secure Your Router and Your Linux System Now and The Ultimate Guide to Using Data Encryption on Linux. We also examine various topics including multiple serious vulnerabilities in the popular Zoom app impacting Linux users, the release of Troy Hunt’s Have I Been Pwned source code to the open-source community and tips and best practices for securing Linux servers against malware and other dangerous exploits. Happy Monday - and happy reading!

IoT Security Vulnerabilities are Ubiquitous: How To Secure Your Router and Your Linux System Now - The Internet of Things (IoT) is rapidly growing, connecting more devices each day. It is projected that by 2025, the world will have an astounding 64 billion IoT devices .

The Ultimate Guide to Using Data Encryption on Linux - Data encryption has never been more important. New data protection and privacy regulations, such as GDPR, mean that companies storing unencrypted customer information are vulnerable to paying heavy fines. The public is now more aware of the importance of encryption, with massive data breaches impacting companies like Facebook receiving major media coverage.


  NSA issues BootHole mitigation guidance (Aug 4)
 

The NSA has issued mitigation guidance for a recently-discovered BootHole vulnerability impacting Linux and Windows systems.

  GRUB2 Boot Failure Issues Fixed in Debian and Ubuntu, Update Now (Aug 6)
 

The recent GRUB2 patches that were released to mitigate critical BootHole vulnerabilities also caused boot failure issues for some users. Luckily, fixes for these regressions have started appearing for some distros, including Debian and Ubuntu.

  Linux 5.8 launched: Linus Torvalds's 'biggest release of all time' brings these new updates (Aug 5)
 

Linux 5.8, which has been  described  by Linux kernel creator Linus Torvalds as "one of our biggest releases of all time", has finally been released with a host of significant improvements.

  Red Hat and CentOS systems aren’t booting due to BootHole patches (Aug 3)
 

Patches issued to fix a recent BootHole vulnerability have rendered RedHat and CentOS systems unbootable.

  First Point Version Ubuntu 20.04.1 LTS Arrives With A Lot Of Bug Fixes (Aug 7)
 

Ubuntu 20.04.1 has finally been released after the  rescheduling  of the point release date of Ubuntu 20.04 and 18.04. This marks the first point release for Ubuntu 20.04 LTS, which  arrived  on April 23, 2020, with various  new features and enhancements .

  Linux Foundation Addresses Open Source Security (Aug 6)
 

The Linux Foundation recently announced that it has launched yet another consortium - this time with the aim of bringing some order to multiple previous efforts to address open source security. The  Open Source Security Foundation  (OpenSSF) will consolidate the efforts of the Core Infrastructure Initiative and the Open Source Security Coalition previously launched by GitHub.

  The Linux Foundation announces collective to enhance open source software security (Aug 4)
 

The newly formed Open Source Security Foundation includes technology giants such as Google, Intel, Microsoft, IBM, among others. The organization aims to improve the security of OSS through the creation of "targeted initiatives," streamlining recommended best practices, and more.

  Have I Been Pwned to release code base to the open source community (Aug 10)
 

Have you heard that Troy Hunt's popular data breach and record exposure search engine  Have I Been Pwned  is going open source?

  Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28 (Aug 10)
 

Security researcher  Mazin Ahmed  demonstrated multiple serious vulnerabilities in the popular Zoom app, two of which impact Linux users, at DEF CON 28.