Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

IBM Closes its $34 Billion Acquisition of Red Hat: A Monumental Moment for Open Source - In the tech giants largest deal ever and one of the biggest deals in US history, IBM closed its $34 billion acquisition of Red Hat on Tuesday July 9, 2019. Red Hat will now be a unit of IBMs hybrid cloud division and Red Hat CEO Jim Whitehurst will join IBMs senior management team. This event has significant meaning that extends beyond is monetary value: it is a testament to the power of Open Source and the opportunity it offers businesses of all sizes across all industries.

Guardian Digital Celebrates 20 Years of Revolutionizing Digital Security, Securing Email with Open Source - Pioneers of business email security for the past 20 years, Guardian Digital draws on the merits of Open Source coupled with expert engineering and unparalleled customer support.


  Microsoft, Google and Apple clouds banned in Germany’s schools (Jul 17)
 

Did you know that Germany just banned its schools from using cloud-based productivity suites from Microsoft, Google, and Apple? The tech giants arent satisfying its privacy requirements with their cloud offerings, it warned. What are your thoughts?

  Malicious libraries in package repositories reveal a fundamental security flaw (Jul 17)
 

The proliferation of malicious packages in repositories for software developers that rely on typosquatting points to a problem: A reliance on flat namespaces.

  NCSC in DNS Warning as Hijackers Focus on Home Routers (Jul 16)
 

Have you heard that the NCSC has warned about DNS hijacking threats focusing on home routers? These attacks aim to modify the settings on home routers, potentially via cross-site request forgery (CSRF) web-based attacks, so that they use rogue DNS servers. The end goal is to secretly redirect the user to a phishing page or one capable of installing malware on their machine.

  Following Court Decision, Amazon and Microsoft Set to Compete Over Military’s Cloud Computing Contract (Jul 15)
 

Have you been following the JEDI project? The $10 billion project has been full of controversy; however, the Pentagon still hopes to seal the deal with either Amazon or Microsoft next month.

  To prepare today’s workforce for AI, they must understand it’s not a threat (Jul 16)
 

How do you feel about AI? AI will have major implications for cyber security and for the workforce in general. Continuous education, transferable skills and a receptivity to learning more ensure that workers will remain adaptive, flexible, and resilient in an increasingly AI-driven future.

  I found your data. It’s for sale. (Jul 18)
 

Can you believe that as many as 4 million people have Web browser extensions that sell their every click? And thats just the tip of the iceberg.

  AI, quantum computing and 5G could make criminals more dangerous than ever, warn police (Jul 19)
 

Like all thinks, there are both benefits and risks associated with AI, quantum computing and 5G. Law enforcement needs to be innovative and act now in order to keep face with near future criminal threats, warns 'Do criminals dream of electric sheep' paper.

  New Attack Lets Android Apps Capture Loudspeaker Data Without Any Permission (Jul 17)
 

Have you heard about Spearphone, a newly demonstrated attack that takes advantage of a hardware-based motion sensor, called an accelerometer, which comes built into most Android devices and can be unrestrictedly accessed by any app installed on a device even with zero permissions?

  Still not using HTTPS? Firefox is about to shame you (Jul 18)
 

Have you heard that two years after promising to report all HTTP-based web pages as insecure, Mozilla is finally about to deliver? Soon, whenever you visit one of the shrinking number of sites that doesnt use a security certificate, the Firefox browser will warn you.

  Lack of trust will doom cryptocurrency (Jul 18)
 

Have you considered what the future of cryptocurrency looks like? Loss of crypto coins through hacks, fake trading and volatility destroy trust in cryptocurrency, but those aren't its only problems.

  A Critical Google Chrome Security Bug Can Now Bring You No Less than $30,000 (Jul 19)
 

Attention ethical hackers: Google has just announced that it decided to increase the bounties offered for Google Chrome browser security vulnerabilities, with the maximum payment now reaching $30,000!

  BBC: Russia is working on a Tor de-anonymization project (Jul 22)
 

Have you heard that hackers have stolen a massive trove of sensitive data and defaced the website of SyTech , a major contractor working for Russian intelligence agency FSB (Federal Security Service)? BBC Russia , which reported the breach, said its possible that this is the largest data leak in the history of the work of Russian special services on the Internet. The documents included descriptions of dozens of internal projects the company was working on, including ones on de-anonymization of users of the Tor browser and researching the vulnerability of torrents.

  Mozilla Firefox Could Soon Get a “Tor Mode” Add-on (Jul 22)
 

Are you a Mozilla Firefox user? Did you know that Firefox browser could soon receive a Tor mode add-on that would significantly enhance privacy by connecting to the Tor network? While the final goal is to implement a fully-featured TOR mode in the browser natively, such a project takes time, and members of Mozilla and the Tor team discussed the challenges at a recent meeting. Their proposal was to develop a browser add-on that would enable this Tor mode in Firefox , as this approach could give the two organizations enough time to plan on the engineering work that is needed for this new feature.