Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Linux Cryptography

We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.

Discover Cryptography News

Linux Kernel Gains Hardware-Wrapped Encryption Keys

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Let’s dive into the latest leap for Linux security: hardware-wrapped inline encryption keys. You might have heard about this feature making its way into the mainline Linux kernel with version 6.16. It's a fascinating piece of technology, particularly if you're someone who frets about keeping your data secure, especially against physical attacks. This feature, initially used in Android devices, promises to add a robust layer of security for encryption keys using dedicated hardware capabilities. It's been a niche topic until now, mainly because it required specific hardware support—something that's increasingly common in modern devices.

When Security Hinges on a Single Key: A Wake-Up Call for Admins

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Admins managing Linux systems know firsthand that security isn’t just about firewalls, encryption, and monitoring tools. Often, it’s the more minor, seemingly mundane details that make or break long-term protection. Recently, the Kali Linux community learned this the hard way when the maintainers of the widely used penetration testing distribution admitted they had lost access to their repository’s signing key. This incident disrupted how admins update their systems and offered crucial lessons about key management, emergency preparedness, and the importance of ensuring infrastructure security.

Abyss Locker Ransomware Targets Linux And Windows Systems: High Threat

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A ransomware variant dubbed "Abyss Locker" has been observed targeting Microsoft Windows and Linux platforms. The Abyss Locker ransomware is believed to be based on the HelloKitty ransomware source code. It steals and encrypts victims' files, demanding ransom for decryption and preventing the release of stolen data. The ransomware's severity level is classified as high, showcasing the urgency of addressing this issue.

Secure Boot Explained: Enhancing Linux Security and System Integrity

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Boot security has become an increasingly important topic in recent years as threats against system integrity continue to evolve. Secure Boot is a security standard developed to provide protection against such threats by validating the integrity of boot software. With Secure Boot, security is enforceable during the boot process rather than relying solely on the operating system. This helps prevent malicious software from embedding itself early in the boot process, providing an additional layer of defense against low-level attacks.

GitHub Passkeys Launch: Cloud-Synced Security for Linux Users

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

GitHub has officially rolled out its passkeys security feature for general availability, following a two-month beta testing phase. Passkeys introduce a cloud-synced authentication system using cryptographic key pairs, allowing users to access websites and applications using their screen-lock PIN, biometrics, or physical security key.

Your message here