Featured Linux Articles

Need an in-depth introduction to a new security topic? Our features articles will bring up up-to-date on everything from buffer overflows to SE Linux policy development.

Empowering Linux and Open-Source Security with AI: Strategies, Tools and Best Practices

It’s hard to think of a technology more impactful than Artificial Intelligence (AI). While it’s been around for a while, it’s only recently broken into the mainstream. Now that it has, it’s rewriting the playbook for much of the tech industry, especi...
May 20, 2024
  0

RHEL 9.4 Unveiled: Elevating Enterprise Security with Cutting-Edge Features

In the evolving cybersecurity landscape, staying ahead ...
May 09, 2024
  0
1.Penguin Landscape Esm H115

Fortifying Email Security with Infosec Through the SDLC

Imagine releasing a software solution into the market o...
May 07, 2024
  0
9.EmailServers Atsign Esm H115

Discover LinuxSecurity Features

LS Hmepg 337x500 34 Esm H200

Real-Time Alerting with Snort

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Real-time alerting is a feature of an IDS or any other monitoring application that notifies a person of an event in an acceptably short amount of time. The amount of time that is acceptable is different for every person.

191 Brittany Brittany Day
10.FingerPrint Locks Esm H200

Qualys Research Team Warns of Significant polkit Vulnerability Affecting All Linux Users

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The Qualys Research Team reached out to LinuxSecurity after discovering a memory corruption vulnerability in polkit’s pkexec. Pkexec is a SUID-root program that is installed by default on every major Linux distribution of the open-source operating system. This vulnerability is easily exploited and gives hackers the opportunity to gain full root privileges on a vulnerable host. Much like the Log4j vulnerability, the severity of this flaw is high and it is imperative that vulnerabilities are reported in a timely fashion. Experts also expressed that due to the simple possibility for exploitation the vulnerability needs to be patched and mitigated immediately.

Justice Img Justice Levine
1.Penguin Landscape Esm H200

Pulling Back the Curtain: About LinuxSecurity.com

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Welcome to LinuxSecurity.com - the community's central source for information on Linux and open source security since 1996. Whether you’re a new visitor or a long-time community member, this article will provide you with insight into the mission behind our site, our history and the content we provide.

191 Brittany Brittany Day

Contribute to LinuxSecurity

Don’t sit on the sidelines of history. Join the Linux Security community
and write real news & articles about Linux that matters the most.

Contribute Now
LS Hmepg 337x500 34 Esm H200

Network Intrusion Detection Using Snort

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This document takes you through the basics of intrusion detection, the steps necessary to configure a host to run the snort network intrusion detection system, testing its operation, and alerting you to possible intrusion events.

191 Brittany Brittany Day
10.FingerPrint Locks Esm H200

Protect Your Privacy & Improve Your Pentesting in 2022 with Predator-OS

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Predator-OS - "the OS that naturally preys on others"- is a free and open-source security-centric project for penetration testing and ethical hacking that can also be used as a privacy-focued, hardened Linux distro. LinuxSecurity researchers spoke with Founder and lead developer Hossein Seilany to get insight into the unique features and benefits that newly released Predator-OS 20.04 LTS offers hackers, pentesters and privacy-conscious Linux users.

191 Brittany Brittany Day
Php Best Practice Esm H200

A Linux Admin's Getting Started Guide to Improving PHP Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Running PHP on a Linux web server is a prerequisite for the use of many popular applications such as Wordpress, Joomla and Drupal. Linux administrators and web developers must approach PHP with caution, as new vulnerabilities in poorly written and implemented PHP code are abundant and dangerous.

191 Brittany Brittany Day
LS Hmepg 337x500 34 Esm H200

Log4j: Everything You Need to Know [Updated]

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Security researchers have warned users that attackers are attempting to exploit a critical vulnerability in the Java logging library Apache Log4j. Log4j is a widely used java library that logs error messages in applications used by enterprise software applications as well as custom-built applications intended for in-house usage.

Justice Img Justice Levine
11.Locks IsometricPattern Esm H200

Anatomy of a Linux Ransomware Attack

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective extortion mechanisms, a ransomware attack can have devastating consequences for any victim including data loss, reputation harm, recovery costs and significant downtime.

191 Brittany Brittany Day
2.Motherboard Esm H200

Lead Microsoft Engineer Kevin Sheldrake Brings Sysmon to Linux

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Thanks to Kevin Sheldrake, co-author of Sysmon for Linux from Microsoft for working with us on this article. Seven years after Microsoft Sysinternals released Sysmon – a system monitoring tool for Windows that reports key system activity via the event log – we were very proud to release the Linux version of the same tool at the Sysinternals @25 celebration event. (You can still catch up on the talks by clicking on the event link.)

191 Brittany Brittany Day
1.Penguin Landscape Esm H200

Could Oracle Linux be the Logical Enterprise-Ready CentOS Replacement?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Red Hat’s recent decision to discontinue CentOS 8 has left a critical void in the enterprise Linux market, shifting the spotlight onto other enterprise-ready Linux distributions. One distro that stands out as a viable CentOS 8 replacement among respected enterprise Linux distributions such as Ubuntu, Red Hat Enterprise Linux (RHEL), AlmaLinux and SUSE is Oracle Linux, an OS compiled from the same open-source code as RHEL.

191 Brittany Brittany Day
Crowd Is The Sol V1 Esm H200

Leveraging the “Power of the Crowd” to Fight Cybercrime with a Unique, Collaborative Intrusion Prevention System

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Exclusive Interview with CrowdSec CEO Philippe Humeau With the widespread adoption of cloud and container infrastructure, protecting servers, services, containers and virtual machines exposed on the Internet with a reliable, intelligent intrusion prevention system is more important than ever. Cloud-native environments foster rapid growth and innovation, but also introduce an element of added complexity, along with new security challenges. 

191 Brittany Brittany Day
Lock Code Circular4 Esm H200

Guide to IT Security Audits

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Protecting a business’ online assets has become difficult due to modern information storing and sharing methods. Sensitive intel is at risk more frequently online, so companies need to utilize thorough IT security audits to verify the safety of their information.

191 Brittany Brittany Day
1.Penguin Landscape Esm H200

Alternatives to CentOS Linux 8

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

In December 2021, CentOS support ended so the company could focus on CentOS Steam instead. Companies with long-term contracts with CentOS may have had issues converting to another program with such short notice, and if they could not grab one in time, their business faced network security issues, compliance risk, and minimal availability. Fortunately, CentOS 7 is still available until 2024. However, there was no way to upgrade CentOS 7 as a short-term solution for CentOS 8 in the interim.

Ls Default Copy 1 Aleksandra Mitroshkina
LS Hmepg 337x500 34 Esm H200

Best File and Disk Encryption Tools For Linux

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Most of us are familiar with Microsoft Windows or macOS - these OSes dominate the personal computing space. But the OS that is taking over the world isn’t owned by Microsoft, Apple, or any tech company for that matter.

191 Brittany Brittany Day
LinuxRootkitsThumbnail Esm H200

What You Need to Know About Linux Rootkits

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Rootkits are an effective way for attackers to hide their tracks and keep access to the machines over which they have gained control. Read on to learn about rootkits, how to detect them and how to prevent them from being installed on your system in the first place.

191 Brittany Brittany Day
TailsOS Esm H200

Tails 4.22 Is Coming Soon! Contribute to Tails by Testing 4.22~rc1

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Tails, or "The Amnesic Incognito Live System", recently released the latest version of its privacy-focused secure Linux distro, Tails 4.21, with various changes, bug fixes and improvements including an update to Tor Browser 10.5.4, an update to Thunderbird 78.12 and a fix for a bug in Tails Installer that enabled the deletion of Persistent Storage when doing a manual upgrade. With Tails 4.22 scheduled for release on September 7, the Tails team is asking users to contribute to Tails by testing the release candidate for Tails 4.22 by the end of August. 

191 Brittany Brittany Day

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved