Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Using the sec-wall Security Proxy - This article full of examples will show you various ways to test services secured using sec-wall, a feature-packed high performance security proxy. We'll be using cURL, a popular Linux command line tool and PycURL - a Python interface to cURL. As of version 1.0, sec-wall supports HTTP Basic auth, digest auth, custom HTTP headers, XPath-based authentication, WS-Security & SSL/TLS client certificates and each of the options is being shown below.

sec-wall: Open Source Security Proxy - sec-wall, a recently released security proxy is a one-stop place for everything related to securing HTTP/HTTPS traffic. Designed as a pragmatic solution to the question of securing servers using SSL/TLS certificates, WS-Security, HTTP Basic/Digest Auth, custom HTTP headers, XPath expressions with an option of modifying HTTP headers and URLs on the fly.


Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

(Jun 10)

The turn of the 21st century was rife with bitter anti-piracy lawsuits pitting studios against their potential customers, with music labels banding together to blast Napster -- and its massive user base -- to smithereens.

(Jun 9)

A Twitter post by Internet hacker, Lulz Security, who recently mocked the security system of Sony and FBI, stated that the group has received thousands of dollars as donation to continue its attacks.

Kaspersky Lab secures Linux (Jun 9)

Kaspersky Lab has announced the release of Kaspersky Endpoint Security 8 for Linux. The updated version of the application designed to protect Linux workstations is available as part of the following corporate products: Kaspersky Work Space Security, Kaspersky Open Space Security, Kaspersky Business Space Security and Kaspersky Enterprise Space Security.

(Jun 8)

Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. The following features are new (or have been significantly updated) since version 1.4: Wireshark is now distributed as an installation package rather than a drag-installer on OS X. The installer adds a startup item that should make it easier to capture packets.

What is World IPv6 Day and why it matters (Jun 7)

While you've been asleep in your beds with visions of iPad 2s dancing in your heads, network administrators have been wide awake getting ready for World IPv6 Day. And, what's that?

Virtualized environments painfully insecure? (Jun 10)

Less than 20 percent of organizations using virtualization technology are adopting security tools to work in tandem with the software in order to decrease the risks that are inherent in a virtualized environment. This according to John Burke, Principal Research Analyst with Nemertes Research, who spoke Tuesday at the IT Roadmap Conference and Expo in Boston about the emerging threats posed to mobile and virtual environments.

(Jun 8)

Google has fixed more than a dozen security bugs in its Chrome browser, including five high-severity vulnerabilities and one that qualified for the company's highest bug bounty, a $3133.7 reward.

(Jun 7)

A new burst of hacks has left companies and government organizations picking up the pieces. Earlier today, The Hacker News reported it had received a message from hacking group Pakistan Cyber Army, claiming the PCA had hacked an Acer Europe server and stole sensitive information.

Google Releases Chrome 12, Adds Security and 3D (Jun 8)

Google has released an update for its Chrome browser, bringing security and 3D improvements. As with previous updates to Chrome, the biggest boasts of version 12 relate to security. The Safe Browsing behind-the-scenes protection has been extended to warn users against downloading dangerous files, although right now this only applies to Windows .exe files.

(Jun 8)

We learned last week that a hacker in China reportedly obtained access to numerous Gmail accounts, including those of senior U.S. government officials, military personnel, Chinese political activists and journalists. How serious is this, and what is the best way to protect yourself and your users?

Hackers hit Atlanta FBI affiliate (Jun 6)

The FBI announced Sunday it shut down an Atlanta-based website that tracks cyber-crime after the site was compromised by a mysterious, yet increasingly audacious group of hackers.

Citigroup says hackers accessed credit card data (Jun 9)

Citigroup Inc. said Thursday that hackers accessed the credit card information of North American customers, in an online security breach affecting about 200,000 accounts.