Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.


LinuxSecurity.com Feature Extras:

Press Release: Guardian Digital Leverages the Power of Open Source to Combat Evolving Email Security Threats - Cloud-based email security solution utilizes the open source methodology for securing business email, recognized by many as the best approach to the problem of maintaining security in the relentlessly dynamic environment of the Internet.

You've Been Pwned! Best Practices to Prevent Your Email Account from Being Compromised in a Data Breach - An Interview with Dave Wreski, CEO of Guardian Digital


  Round 4: Hacker returns and puts 26Mil user records for sale on the Dark Web (Mar 18)
 

A hacker who has previously put up for sale over 840 million user records in the past month, has returned with a fourth round of hacked data that he's selling on a dark web marketplace.

  ONS Evolution: Cloud, Edge, and Technical Content for Carriers and Enterprise (Mar 17)
 

The first Open Networking Summit was held in October 2011 at Stanford University and described as "a premier event about OpenFlow and Software-Defined Networking (SDN)". Here we are seven and half years later and I'm constantly amazed at both how far we've come since then, and at how quickly a traditionally slow-moving industry like telecommunications is embracing change and innovation powered by open source.

  Beto O’Rourke’s secret membership in America’s oldest hacking group (Mar 18)
 

As the Texas Democrat enters the race for president, members of a group famous for "hactivism" come forward for the first time to claim him as one of their own.

  CUJO Smart Firewall vulnerabilities exposed home networks to critical attacks (Mar 20)
 

Security researchers have uncovered a swathe of serious vulnerabilities in a firewall system developed by CUJO which has been designed to prevent cyberattackers from infiltrating home networks.

  Researchers find 36 new security flaws in LTE protocol (Mar 23)
 

A group of academics from South Korea have identified 36 new vulnerabilities in the Long-Term Evolution (LTE) standard used by thousands of mobile networks and hundreds of millions of users across the world.

  Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years (Mar 22)
 

Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees -- in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so far found no indication that employees have abused access to this data.

  Critical flaw revealed in Facebook Fizz TLS project (Mar 23)
 

Researchers have found a vulnerability in the open-source Facebook Fizz project which is relatively easy to trigger for the purposes of a denial-of-service (DoS) attack.

  B0r0nt0K Ransomware Threatens Linux Servers (Mar 25)
 

A new cryptovirus called "B0r0nt0K" has been putting Linux and possibly Windows Web servers at risk of encrypting all of the infected domain's files.

  US Government Leaks PII of 2m+ Disaster Survivors (Mar 25)
 

A US government agency responsible for disaster relief has accidentally leaked the personal data of millions of disaster survivors with a third-party contractor, it has revealed.