Linux - Security Ticks

Linux Kernel Runtime Guard hits 1.0.0 with major updates and broader support

Linux, News, open source, software, system hardening / SecurityTicks

Linux Kernel Runtime Guard hits 1.0.0 with major updates and broader support 2025-09-08 at 09:52 By Sinisa Markovic The Linux Kernel Runtime Guard (LKRG) is a kernel module that checks the Linux kernel while it’s running. It looks for signs of tampering and tries to catch attempts to exploit security flaws in the kernel. Because […]

React to this headline:

Linux Kernel Runtime Guard hits 1.0.0 with major updates and broader support Read More »

Arch Linux Project Responding to Week-Long DDoS Attack

Arch Linux, cybercrime, DDoS, disruption, Linux / SecurityTicks

Arch Linux Project Responding to Week-Long DDoS Attack 2025-08-25 at 11:18 By Ionut Arghire The Arch Linux Project has been targeted in a DDoS attack that disrupted its website, repository, and forums. The post Arch Linux Project Responding to Week-Long DDoS Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Arch Linux Project Responding to Week-Long DDoS Attack Read More »

Open-source server management platform Proxmox VE 9.0 released

Debian, enterprise, Linux, networking, News, open source, Proxmox, servers, software, storage / SecurityTicks

Open-source server management platform Proxmox VE 9.0 released 2025-08-06 at 16:17 By Help Net Security Proxmox Virtual Environment (VE) 9.0 introduces advancements in both storage and networking capabilities, addressing critical enterprise demands. A highlight is the long-awaited support for snapshots on thick-provisioned LVM shared storage, improving storage management capabilities especially for enterprise users with Fibre

React to this headline:

Open-source server management platform Proxmox VE 9.0 released Read More »

Falco: Open-source cloud-native runtime security tool for Linux

Cloud, Cloud Native Computing Foundation, Don't miss, GitHub, Linux, News, open source, software / SecurityTicks

Falco: Open-source cloud-native runtime security tool for Linux 2025-07-16 at 07:46 By Help Net Security Falco is an open-source runtime security tool for Linux systems, built for cloud-native environments. It monitors the system in real time to spot unusual activity and possible security threats. Falco is a graduated project from the Cloud Native Computing Foundation

React to this headline:

Falco: Open-source cloud-native runtime security tool for Linux Read More »

ParrotOS 6.4 lands with key tool updates and kernel upgrade

Linux, News, open source, software / SecurityTicks

ParrotOS 6.4 lands with key tool updates and kernel upgrade 2025-07-08 at 11:32 By Anamarija Pogorelec ParrotOS, known for its emphasis on security, privacy, and development, is widely used by cybersecurity professionals and enthusiasts alike. Version 6.4 delivers a host of updates and community-driven enhancements. The update is expected to be the final release in

React to this headline:

ParrotOS 6.4 lands with key tool updates and kernel upgrade Read More »

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463)

Debian, Don't miss, Hot stuff, Linux, macOS, News, Stratascale, SUSE, Ubuntu, vulnerability / SecurityTicks

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463) 2025-07-01 at 16:11 By Zeljka Zorz If you haven’t recently updated the Sudo utility on your Linux box(es), you should do so now, to patch two local privilege escalation vulnerabilities (CVE-2025-32462, CVE-2025-32463) that have been disclosed on Monday. What is Sudo? Sudo is command-line utility in Unix-like

React to this headline:

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463) Read More »

Amazon Linux 2023 achieves FIPS 140-3 validation

Amazon, Linux, News, open source / SecurityTicks

Amazon Linux 2023 achieves FIPS 140-3 validation 2025-06-20 at 10:52 By Help Net Security Amazon Linux 2023 (AL2023) has earned FIPS 140-3 Level 1 validation for several of its cryptographic modules. This means it’s now approved for use in systems that need to meet U.S. and Canadian government standards for encryption. FIPS (Federal Information Processing

React to this headline:

Amazon Linux 2023 achieves FIPS 140-3 validation Read More »

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation

CISA KEV, exploited, kernel, Linux, Vulnerabilities, vulnerability / SecurityTicks

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation 2025-06-18 at 15:33 By Eduard Kovacs Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog. The post Linux Security: New Flaws Allow Root Access, CISA Warns of Old

React to this headline:

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation Read More »

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019)

Debian, Don't miss, Fedora, Hot stuff, Linux, News, openSUSE, Qualys, Ubuntu, vulnerability / SecurityTicks

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019) 2025-06-18 at 14:49 By Zeljka Zorz Qualys researchers have unearthed two local privilege escalation vulnerabilities (CVE-2025-6018, CVE-2025-6019) that can be exploited in tandem to achieve root access on most Linux distributions “with minimal effort.” About the vulnerabilities (CVE-2025-6018, CVE-2025-6019) CVE-2025-6018 affects the Pluggable

React to this headline:

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019) Read More »

35 open-source security tools to power your red team, SOC, and cloud security

Android, cybersecurity, GitHub, Linux, macOS, News, open source, software, Windows / SecurityTicks

35 open-source security tools to power your red team, SOC, and cloud security 2025-06-18 at 08:31 By Help Net Security This article showcases free, open-source security tools that support your organization’s teams in red teaming, threat hunting, incident response, vulnerability scanning, and cloud security. Autorize: Burp Suite extension for automatic authorization enforcement detection Autorize is

React to this headline:

35 open-source security tools to power your red team, SOC, and cloud security Read More »

Review: Learning Kali Linux, 2nd Edition

books, Don't miss, Kali Linux, Linux, News, OffSec, penetration testing, Review, Reviews, skill development / SecurityTicks

Review: Learning Kali Linux, 2nd Edition 2025-06-16 at 07:32 By Mirko Zorz Kali Linux has long been the go-to operating system for penetration testers and security professionals, and Learning Kali Linux, 2nd Edition by Ric Messier aims to guide readers through its core tools and use cases. This updated edition introduces new material on digital

React to this headline:

Review: Learning Kali Linux, 2nd Edition Read More »

The Windows Subsystem for Linux goes open source

Linux, Microsoft, News, open source / SecurityTicks

The Windows Subsystem for Linux goes open source 2025-05-20 at 12:47 By Anamarija Pogorelec Microsoft has officially open-sourced the Windows Subsystem for Linux (WSL), closing the very first issue ever filed on the Microsoft/WSL GitHub repository: “Will this be open source?” WSL allows developers to run unmodified Linux command-line tools, utilities, and applications directly on

React to this headline:

The Windows Subsystem for Linux goes open source Read More »

Containers are just processes: The illusion of namespace security

containers, cybersecurity, Don't miss, Edera, Expert analysis, Expert corner, Hot stuff, Kubernetes, Linux, News, open source, opinion / SecurityTicks

Containers are just processes: The illusion of namespace security 2025-05-20 at 08:31 By Help Net Security In the early days of commercial open source, major vendors cast doubt on its security, claiming transparency was a flaw. In fact, that openness fueled strong communities and faster security improvements, making OSS often more secure than proprietary code.

React to this headline:

Containers are just processes: The illusion of namespace security Read More »

Nobara Linux 42 brings performance boost and better hardware support

Fedora, Linux, News, open source / SecurityTicks

Nobara Linux 42 brings performance boost and better hardware support 2025-05-14 at 12:08 By Help Net Security The Nobara Project has released a new version of its Linux distribution, bringing updated packages, performance improvements, and a few visual tweaks aimed at making life easier for users who want a system that works well out of

React to this headline:

Nobara Linux 42 brings performance boost and better hardware support Read More »

Avocado OS: Open-source Linux platform for embedded systems

Industry news, Linux, open source, Peridio / SecurityTicks

Avocado OS: Open-source Linux platform for embedded systems 2025-04-28 at 15:32 By Industry News Peridio, a platform for building and maintaining advanced embedded products, has launched Avocado OS, an open-source embedded Linux distribution made to simplify the way developers build complex embedded systems. Avocado OS focuses on delivering a smooth developer experience while offering security,

React to this headline:

Avocado OS: Open-source Linux platform for embedded systems Read More »

Review: The Ultimate Kali Linux Book, Third Edition

books, Don't miss, Kali Linux, Linux, News, penetration testing, Review, Reviews, skill development / SecurityTicks

Review: The Ultimate Kali Linux Book, Third Edition 2025-04-10 at 07:31 By Mirko Zorz Packed with real-world scenarios, hands-on techniques, and insights into widely used tools, the third edition of the bestselling Ultimate Kali Linux Book offers a practical path to learning penetration testing with Kali Linux. About the author Glen D. Singh, a seasoned

React to this headline:

Review: The Ultimate Kali Linux Book, Third Edition Read More »

Kunai: Open-source threat hunting tool for Linux

Don't miss, GitHub, Linux, News, open source, software, threat hunting / SecurityTicks

Kunai: Open-source threat hunting tool for Linux 2025-02-19 at 08:19 By Mirko Zorz Kunai is an open-source tool that provides deep and precise event monitoring for Linux environments. “What sets Kunai apart is its ability to go beyond simple event generation. While most security monitoring tools rely on syscalls or kernel function hooking, Kunai takes

React to this headline:

Kunai: Open-source threat hunting tool for Linux Read More »

Don’t let these open-source cybersecurity tools slip under your radar

Android, cybersecurity, Don't miss, GitHub, Hot stuff, Linux, macOS, News, open source, software, Windows / SecurityTicks

Don’t let these open-source cybersecurity tools slip under your radar 2025-01-27 at 07:07 By Help Net Security This article showcases free, open-source cybersecurity tools that help you identify and address vulnerabilities, detect intrusion, protect websites from cyber attacks, monitor and detect suspicious activities across your network. Am I Isolated: Open-source container security benchmark Am I

React to this headline:

Don’t let these open-source cybersecurity tools slip under your radar Read More »

GUI frontends for GnuPG, the free implementation of the OpenPGP standard

Don't miss, Encryption, GitHub, Linux, News, open source, software / SecurityTicks

GUI frontends for GnuPG, the free implementation of the OpenPGP standard 2025-01-24 at 07:20 By Help Net Security GnuPG is a free and comprehensive implementation of the OpenPGP standard. It enables encryption and signing of data and communications, featuring a key management system and support for public key directories. While primarily a command-line tool, GnuPG

React to this headline:

GUI frontends for GnuPG, the free implementation of the OpenPGP standard Read More »

Juniper enterprise routers backdoored via “magic packet” malware

backdoor, Don't miss, enterprise, Hot stuff, Juniper Networks, Linux, Lumen, Malware, News, router / SecurityTicks

Juniper enterprise routers backdoored via “magic packet” malware 2025-01-23 at 20:05 By Zeljka Zorz A stealthy attack campaign turned Juniper enterprise-grade routers into entry points to corporate networks via the “J-magic” backdoor, which is loaded into the devices’ memory and spawns a reverse shell when instructed to do so. “Our telemetry indicates the J-magic campaign

React to this headline:

Juniper enterprise routers backdoored via “magic packet” malware Read More »