Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Review: The Official Ubuntu Book - If you haven't used Linux before, are new to Ubuntu, or would like a quick update on the latest in open source advancements for the desktop, then The Official Ubuntu Book is a great place to start. Authored by a group of some of the most experienced open source administrators and developers, this 400-page user guide details everything you need to know about how to make the most of your Ubuntu, Kubuntu (Ubuntu with KDE), and Xubuntu (Ubuntu with Xfce) computer.

Review: Zabbix 1.8 Network Monitoring - If you have anything more than a small home network, you need to be monitoring the status of your systems to ensure they are providing the services they were designed to provide. Rihards Olups has created a comprehensive reference and usability guide for the latest version of Zabbix that anyone being tasked with implementing should have by their side.


Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

Crackers destroy security mailing list for Linux distributors (Mar 4)

The infrastructure of the members-only security mailing list "Vendor-Sec" for open source vendors has been severely damaged according to a post published by Markus Meissner at the OSS Security mailing list. At Vendor-Sec, Linux and BSD distributors discussed undisclosed vulnerabilities in the kernel and open source software. Some of the information was embargoed to give vendors time to close their holes.

(Mar 1)

Apple is apparently modernising its security policy. As US magazine Computerworld reports, Apple has provided a number of security experts with a pre-release version of OS X 10.7 "Lion" and asked for feedback. However, the experts were required to sign a non-disclosure agreement (NDA) and if they found any problems, they were asked not to make them public.

Firesheep hack catches out Mr Demi Moore (Mar 3)

Ashton Kutcher's Twitter profile was hacked on Wedesday to spout pro-SSL graffiti. Instead of the usual updates of the life of Mr Demi Moore, the aplusk account regaled its 6.4 million followers with security warnings, such as the one below.

WordPress under hacker attack (Mar 4)

Readers of Financial Post or National Post blogs might have found them difficult, if not impossible, to access Thursday morning. That is because WordPress, the platform through which every FP and NP blog has been published for the past 10 months, has been under attack by hackers for the past several hours.

How Hackers Could Exploit Federal Government Shutdown (Feb 28)

The federal government's list of emergency network security personnel has not been updated in 15 years, putting national security at high risk if a shutdown takes place on March 4. The possible government shutdown scheduled for March 4, 2011 could trigger a cyberwar emergency.

(Feb 28)

Trying to explain Anonymous is a hopeless undertaking