What Are You Looking To Secure Today?
Recent Searches
Advisories
Debian Request Tracker Important SQL Injection Risk DSA-6327-1
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result privilege escalation, information disclosure, SQL injections, LDAP authentication bypass, cross-site scripting or sprea...
Debian Nginx Critical Remote Code Execution Denial Service DSA-6326-1
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have bee...
Debian Chromium Critical Arbitrary Code Execution DSA-6325-1
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 149.0.7827.53-1~deb1...
openSUSE ansible-core Moderate Vulnerabilities Advisory 2026-10945-1
An update that solves 6 vulnerabilities can now be installed.
openSUSE Tumbleweed erlang27 Moderate Update 2026-10947-1 CVE-2025-4748
An update that solves 14 vulnerabilities can now be installed.
Join Our Community
Join our community and get the latest security insights delivered to you.
Featured Articles
Linux Persistence Hunting: The 5 Techniques Security Teams Miss Most
You remove the malware. You rotate the compromised credentials. You patch the original...
Red Hat npm Package Compromise Highlights a Growing Supply Chain Problem
Researchers investigating a campaign now tracked as Miasma found that more than 30 packages in Red...
Get expert insights in the realm of Linux Security
Subscribe to Linux Security Newsletters
Why Linux Rootkits Still Matter in Cloud and VMware Environments
Linux rootkits are old, but they never really disappeared. They just stopped attracting the same...
SSH Key Sprawl on Linux Unmanaged Access Threats and Cleanup Guide
A production Linux server gets rebuilt from an old image. A contractor leaves. A CI/CD job is...
GitHub Actions Compromise CI/CD Supply Chain Risks Explored
For years, most software supply chain attacks focused on malicious dependencies and vulnerable...
Get expert insights in the realm of Linux Security
Subscribe to Linux Security Newsletters
Latest Linux Security News
VPN Strategies for Linux Developers Managing Mobile Security Risks
Misuse of Cron Jobs for Long-Term Access in Linux Environments
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it c...
Risks of GitHub Repo Breach on Linux Supply Chain Security
A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security.
Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for yea...
Trending News
HOWTOs
How to Harden SSH on Linux After Disabling Password Authentication
Most SSH hardening advice ends at the same recommendation: Disable password authentication and use SSH keys.
How to Detect Unauthorized SSH Keys on Linux Systems
Most of the time, nobody notices. SSH authentication succeeds, no alerts are generated, and the connection looks exactly the way it did the day the key was installed. That's part of the problem.
Linux IDS vs IPS: Operational Differences and Deployment Tradeoffs
The wrong IPS rule can look like a security fix right up until it becomes an outage.
How To Understand Failed Authentication Patterns in Linux Logs
Exposed SSH servers are continuously hammered by brute-force attacks, password spraying, credential stuffing, and recycled passwords from infostealer dumps. Attackers rotate usernames, test weak credentials, and probe for anything that gives them ini...
How to Respond After Detecting a Compromised Linux Server
The first 30 minutes after discovering a compromised Linux server usually decide how much evidence remains available.
One rushed reboot or cleanup attempt can wipe logs, terminate malicious processes, or remove network activity that investigators st...
Community Poll
What got you started with Linux?
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!