Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.


LinuxSecurity.com Feature Extras:

Press Release: Guardian Digital Leverages the Power of Open Source to Combat Evolving Email Security Threats - Cloud-based email security solution utilizes the open source methodology for securing business email, recognized by many as the best approach to the problem of maintaining security in the relentlessly dynamic environment of the Internet.

You've Been Pwned! Best Practices to Prevent Your Email Account from Being Compromised in a Data Breach - An Interview with Dave Wreski, CEO of Guardian Digital


  New Intel firmware boot verification bypass enables low-level backdoors (May 12)
 

Researchers have found a new way to defeat the boot verification process for some Intel-based systems, but the technique can also impact other platforms and can be used to compromise machines in a stealthy and persistent way.

  Opera will support ‘multiple blockchains’ in its browser, starting with TRON (May 15)
 

Opera will soon be adding native support for the TRON blockchain in its cryptocurrency-focused browser.

  Equifax Has Spent Nearly $1.4bn on Breach Costs (May 14)
 

Equifax has incurred losses so far of over $1.35bn from a devastating 2017 breach which affected more than half of all Americans and millions of UK consumers, the firm revealed in its latest financials.

  Update WhatsApp now! One call could give spies access to your phone (May 14)
 

On Monday 13 May, Facebook revealed that an "advanced cyber actor" has been spying on some users of its ridiculously popular WhatsApp messaging app, thanks to a zero-day vulnerability that allowed hackers to install spyware, silently, just by calling a victim's phone.

  Study finds Android smartphones riddled with suspect ‘bloatware’ (May 13)
 

One of the oft-discused downsides of choosing an Android device is the phenomenon of pre-loaded "bloatware."

  Two people indicted for massive Anthem health data breach (May 13)
 

The US thinks it knows who's behind the vast breach that siphoned off 78.8 million customer and employee records from US health insurer Anthem between 2014 and 2015.

  Amazon granted patent for Bitcoin-style system to fight DDoS attacks (May 17)
 

Cryptocurrency rumor mongers are likely to be dancing today as Amazon has successfully filed a patent for a Bitcoin-styled Proof-of-Work system. But don't get ahead of yourself, it doesn't look like the Seattle-based ecommerce giant will be accepting Bitcoin for payments.

  Do Apple devices need anti-virus software? (May 16)
 

Apple's devices are far better defended against malware and viruses than other platforms, but does this mean they don't need anti-virus software?

  Privacy concerns raised about upcoming Client-Hints web standard (May 16)
 

Developers of the privacy-focused Brave browser have raised concerns last week about possible user privacy issues in Client-Hints, a new internet standard currently pending approval by the Internet Engineering Task Force (IETF).

  The Open-Source / Linux Highlights From OSTS 2019 (May 18)
 

We've had a number of articles covering the interesting news out of Intel's 2019 Open-Source Technology Summit (OSTS) held at Skamania Lodge in Stevenson, Washington. Here's a look back at the news out of the open-source event as well as some other smaller bits of information shared during the event.

  GDPR adtech complaints keep stacking up in Europe (May 20)
 

It's a year since Europe's General Data Protection Regulation (GDPR) came into force and leaky adtech is now facing privacy complaints in four more European Union markets. This ups the tally to seven markets where data protection authorities have been urged to investigate a core function of behavioral advertising.

  Cyber Security NSW to boost state capabilities (May 20)
 

The New South Wales government has launched Cyber Security NSW in a bid to consolidate and lift the cyber capability of state entities.