Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Review: The Official Ubuntu Book - If you haven't used Linux before, are new to Ubuntu, or would like a quick update on the latest in open source advancements for the desktop, then The Official Ubuntu Book is a great place to start. Authored by a group of some of the most experienced open source administrators and developers, this 400-page user guide details everything you need to know about how to make the most of your Ubuntu, Kubuntu (Ubuntu with KDE), and Xubuntu (Ubuntu with Xfce) computer.

Review: Zabbix 1.8 Network Monitoring - If you have anything more than a small home network, you need to be monitoring the status of your systems to ensure they are providing the services they were designed to provide. Rihards Olups has created a comprehensive reference and usability guide for the latest version of Zabbix that anyone being tasked with implementing should have by their side.


Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

The Illustrated Guide to Security (Oct 28)

If a picture's worth 1,000 words, these illustration and diagrams have a lot to say about security. A dozen interesting and illuminating looks at data center security, image spam, forts and castles, and much more from CSO's archives.

Firefox Add-on Firesheep Brings Hacking to the Masses (Oct 26)

Want to hack someone else's Amazon, Facebook, Twitter or Windows Live account in just one click? A Firefox extension called Firesheep claims you can by hijacking a person's current user session over an open Wi-Fi connection.

(Oct 27)

Security experts today suggested ways Firefox users can protect themselves against Firesheep, the new browser add-on that lets amateurs hijack users' access to Facebook, Twitter and other popular services.

(Oct 26)

Security experts have discovered two vulnerabilities in the Linux operating system platform that could grant attackers root privileges on an infected system.

How a Pas5woRd Can Sink Your Company (Oct 26)

Back in the 1990s fellow science and technology journalist Charles Mann and I wrote a book uncovering the true story of how a lone, young, cognitively impaired hacker with relatively few computer skills managed to perpetrate what was then the most extensive and scariest series of computer break-ins ever -- government weapons labs, dam control systems and ATM networks were among the hundreds of networks compromised.

Hacking Damn Vulnerable Linux (Oct 29)

If you can't exploit it, you can't secure it. I don't know if that quote has been said before, but if you are deeply interested about computer security or ethical hacking, that should be your main mantra.

How to Fix a Windows Infection Using Linux (Oct 26)

If you use Linux on your company's desktop or server computers, you're already familiar with many of the security advantages the open source operating system offers over its Windows and Mac rivals. What many people don't realize, however, is that Linux can also be used to rescue a computer that has been crippled by malware.

Is open source Snort dead? Depends who you ask (Oct 29)

Is Snort, the 12-year-old open-source intrusion detection and prevention system, dead?The Open Information Security Foundation (OISF), a nonprofit group funded by the U.S. Dept. of Homeland Security (DHS) to come up with next-generation open source IDS/IPS, thinks so.

Linux Kernel 2.6.36 Gets AppArmor (Oct 26)

After years of being outside of the mainline, the AppArmor security system is now finally part of the main Linux kernel. Linux founder Linus Torvalds formally released the 2.6.36 kernel this week nearly three months after the release of the 2.6.35 kernel.

Firesheep Hacker Pokes Privacy Holes in Facebook, Twitter (Oct 27)

Over the last few days, the internet was lit up by reports of a security hole in the Firefox web browser that allowed anyone to hack into Facebook, Twitter, Yelp or Tumblr. A freelance programmer named Eric Butler wrote an extension to Firefox (which anyone can install) that exploits this hole by grabbing free-floating cookies in Wi-Fi networks attached to the above-named sites.

(Oct 29)

Google knows a thing or two about malware on the Web. Google comes across malware on a regular basis and has made a number of efforts to help secure Web users against potential malware risk.

How public-key crypto was born (Oct 27)

Public-key cryptography is widely used to secure online transactions. The math behind the technology was devised by U.K. Government Communications Headquarters scientists in the late 1960s and early 1970s.