Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

What You Need to Know About Linux Rootkits - Rootkits are a way attackers hide their tracks and keep access to the machines they control. The good rootkits are very hard to detect and remove. They can be running on ones computer and no one can even know they have been running. Read more to learn how to detect them on your system.

Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition - Mark Sobell again delivers the answers to common Linux administration challenges, and provides thorough and step-by-step instructions to configuring many of the common Linux Internet services in A Practical Guide to Fedora and Red Hat Enterprise Linux, Fifth Edition.


Five ways to avoid being tracked on the Web (Sep 2)

Web spies are getting stealthier and stealthier. Recently they've been caught peering into our browser histories to determine the sites we've visited, even in so-called privacy mode with cookies disabled, as Dan Goodin described earlier this month on The Register.

(Sep 1)

Want to avoid large-scale data breaches of the type served up by hacking group Anonymous, and its LulzSec and AntiSec offshoots? Start by paying attention to the security basics, including hiring good people and training employees to be security-savvy.

(Aug 31)

Anonymous is a strange organization in the sense that it is not entirely organized. Sure, it has international recognition as a self-dubbed "hacktivist" network that gets involved with protests worldwide and infiltrates the websites and databases of corporations and governmental organizations alike.

Defending Against the Apache Killer (Aug 29)

Apache, the open-source Web server, is the most popular Web server on the planet. It's also as safe as safe can be. Well, usually it is. An old, unfixed security hole has come back to haunt the Apache webmasters in the form of a Distributed Denial of Service (DDoS) attack tool: Apache Killer.

(Sep 1)

As Linux fans know, there are two kinds of hackers: the good guys who develop free software, such as the Linux kernel, and the bad guys who break into computers.

(Sep 2)

The Sri Lankan branch of Anonymous claims to have hacked into the DNS servers of Symantec, Apple, Facebook, Microsoft, and several other large organizations over the past few days.

Man-in-the-Middle Attack Against Google Demonstrates Dangerous Weakness of Certificate Authority (Sep 1)

What's worse than discovering that someone has launched a man-in-the-middle attack against Iranian Google users, silently intercepting everything from email to search results and possibly putting Iranian activists in danger? Discovering that this attack has been active for two months.

It's official: Hacking has been gamified (Aug 31)

To the uninitiated, hacker culture commands a mysterious allure. It's a world filled with shadowy aliases and technical jargon. In this secret underground, libertarian warriors -- or infantile nihilists, depending on your point of view -- plot the capture of corporate data centers and attacks on government agencies.

(Aug 29)

Developers of the Apache open-source project today warned users of the popular Web server software that a denial-of-service (DoS) tool is circulating that exploits a bug in the program.

Alleged LulzSec hacker 'Kayla' arrested by UK police (Sep 2)

Another two men suspected of involvement in attacks by Anonymous and LulzSec have been arrested by British police, bringing the total detained in an extraordinary week to seven.

Worm spreading via RDP (Aug 29)

It's retro day in the world of Internet security, with an Internet worm dubbed "Morto" spreading via the Windows Remote Desktop Protocol (RDP).

Linux Kernel Host Kernel.org Breached (Aug 31)

The site that hosts the Linux kernel's source code, Kernel.org was compromised earlier this month. The discovery was made on August 28th, and steps are being taken now to enhance security for the site and recovery is underway. The kernel code repositories are believed to be unaffected.