Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

How SQL / NoSQL Databases Enable Blockchain Applications to Become GDPR Compliant - Blockchain, being a decentralized & dis-intermediated data store, is being considered for rapid adoption, in several industries like Supply Chain Management, P2P Global Transactions, Internet of Things, Electoral Voting, Stock Exchanges etc...

Email Security FAQs Answered by Guardian Digital - With email-related attacks becoming increasingly prevalent and serious, effectively securing your email accounts is more important than ever before.


  (Dec 18)
 

Protecting an account with multi-factor authentication (MFA) is a no-brainer, but that doesn't mean every method for doing this is equally secure.

  (Dec 16)
 

Developers of phpMyAdmin, one of the most popular and widely used MySQL database management systems, today released an updated version 4.8.4 of its software to patch several important vulnerabilities that could eventually allow remote attackers to take control of the affected web servers.

  (Dec 17)
 

A leading children's charity was conned into sending $1m to a fraudster's bank account this year, in another example of the dangers of Business Email Compromise (BEC).

  Facebook bug exposed unposted photos of 6.8 million users (Dec 16)
 

Facebook on Friday disclosed a data breach that may have exposed unposted photos of as many as 6.8 million users.

  Facebook photo API bug exposed users' unpublished photos (Dec 18)
 

A bug in Facebook's photo API may have exposed up to 6.8 million users' photos to app developers, the company announced on Friday.

  Twitter Discloses Suspected State-Sponsored Attack After Minor Data Breach (Dec 18)
 

Twitter has been hit with a minor data breach incident that the social networking site believes linked to a suspected state-sponsored attack.

  Facebook defends giving tech giants access to extensive user data (Dec 19)
 

Facebook has defended its data-sharing practices with other technology firms while at the same time admitting that lax API control may have exacerbated what has already been a trying year for the social networking giant.

  (Dec 20)
 

Data breaches happen daily, in too many places at once to keep count. But what constitutes a huge breach versus a small one? CSO compiled a list of 18 of the biggest or most significant breaches of the 21st century.

  Celebrating 20 Years of OpenSSL (Dec 20)
 

20 years ago, on the 23rd December 1998, the first version of OpenSSL was released. OpenSSL was not the original name planned for the project but it was changed over just a few hours before the site went live. Let's take a look at some of the early history of OpenSSL as some of the background has not been documented before.

  (Dec 17)
 

Cybercriminals know that defenders have begun using machine learning to keep users safe. In response, they are changing their tactics to outwit the defenses, and machine learning that leans heavily on historic loss patterns is especially vulnerable.

  (Dec 21)
 

Researchers have attributed a new wave of Shamoon disk wiper attacks to Iranian hacking group APT33.

  Mayday! NASA Warns Employees of Personal Information Breach (Dec 19)
 

Another day, another data breach. This time it's the United States National Aeronautics and Space Administration (NASA)