Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Advisory Watch: March 27th, 2015
Linux Security Week: March 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Network Security
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.

Domain keywords used to spot phishing sites  06 March 2015 
Source: CSO Online - Posted by Dave Wreski   
Criminals setting up fake domains for phishing are prone to use the same words over and over and spotting those words can help identify malicious sites, according to a new threat detection model from OpenDNS.
Why Network Segmentation is Imperative on the Internet of Things  27 January 2015 
Source: Security Ledger - Posted by Alex   
I’m speaking on a frequent (and increasing) basis with customers about the opportunities and risks that they need to prepare for as they continue to support new business models related to mobility, cloud and the Internet of Things (IoT).
Internet Systems Consortium Site Redirects to Angler Exploit  30 December 2014 
Source: ThreatPost - Posted by Alex   
The Internet Systems Consortium website is offline today after the non-profit domain name service maintainer announced its website had possibly become infected with malware.
Who’s in the Lizard Squad?  29 December 2014 
Source: Krebs on Security - Posted by Alex   
The core members of a group calling itself “Lizard Squad” — which took responsibility for attacking Sony’s Playstation and Microsoft‘s Xbox networks and knocking them offline for Christmas Day — want very much to be recognized for their actions. So, here’s a closer look at two young men who appear to be anxious to let the world know they are closely connected to the attacks.
Segmenting for security: Five steps to protect your network  18 December 2014 
Source: Network World - Posted by Alex   
Relying on a DMZ to protect your network and data is like putting money in a bank that depends on one guard and a single gate to secure its deposits. Imagine how tempting all those piles of money would be to those who had access — and how keen everyone else would be to obtain access.
Exploiting MS14-068 - just another pentest  15 December 2014 
Source: Hashcrack - Posted by Dave Wreski   
This is a short post on how to exploit MS14-068 on Linux. This came up on my recent internal infrastructure engagement. The primary DC was a vulnerable Windows 2008 R2 SP1 server.
Why there’s no open-source standard-bearer for the network  02 December 2014 
Source: Network World - Posted by Dave Wreski   
Open-source software plays an increasingly prominent role in many areas of modern business IT – it’s in servers, databases and even the cloud. Vendors like Red Hat, Canonical and others have managed to graft open-source principles onto a profitable business model. The former company became the first open-source-centered business with $1 billion in annual revenue in 2012.
Google Releases Nogotofail Tool to Test Network Security  06 November 2014 
Source: ThreatPost - Posted by Dave Wreski   
The last year has produced a rogues’ gallery of vulnerabilities in transport layer security implementations and new attacks on the key protocols, from Heartbleed to the Apple gotofail flaw to the recent POODLE attack. To help developers and security researchers identify applications that are vulnerable to known SSL/TLS attacks and configuration problems, Google is releasing a tool that checks for these problems.
How the cloud is changing the security game  03 October 2014 
Source: Network World - Posted by Dave Wreski   
Cloud computing offers many advantages, but with those benefits come a new range of security concerns. “From a security perspective, the cloud has introduced new risks,” says David Levin, director of information security at Western Union, who oversees the security of applications being used at the money transfer company.
DDoS attackers turn fire on ISPs and gaming servers  22 September 2014 
Source: TechWorld - Posted by Alex   
DDoS attackers seem to have switched their attention from banks to gaming hosts, ISPs and even enterprises, half-year figures from Chinese mitigation vendor NSFOCUS have confirmed.
<< Start < Prev 1 2 3 Next > End >>

Results 1 - 10 of 1767


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.