#linuxsecurity

[arthritisgarry]

Ageless Linux: Software for Humans of Indeterminate Age

Important for any of you California linux users :3

[sentientcitysurvival]

Basic Linux Security (Updated 2025)

Install Unattended Upgrades and enable the "unattended-upgrades" service.

Install ClamAV and enable "clamav-freshclam" service.

Install and run Lynis to audit your OS.

Use the "last -20" command to see the last 20 users that have been on the system.

Install UFW and enable the service.

Check your repo sources (eg; /etc/apt/).

Check the /etc/passwd and /etc/shadow lists for any unusual accounts.

User the finger command to check on activity summaries.

Check /var/logs for unusual activity.

Use "ps -aux | grep TERM" or "ps -ef | grep TERM" to check for suspicious ongoing processes.

Check for failed sudo attempts with "grep "NOT in sudoers" /var/log/auth.log.

Check journalctl for system messages.

Check to make sure rsyslog is running with "sudo systemctl status rsyslog" (or "sudo service rsyslog status") and if it's not enable with "sudo systemctl enable rsyslog".

Perform an nmap scan on your machine/network.

Use netstat to check for unusual network activity.

Use various security apps to test you machine and network.

Change your config files for various services (ssh, apache2, etc) to non-standard configurations.

Disabled guest accounts.

Double up on ssh security by requiring both keys and passwords.

Check your package manager for any install suspicious apps (keyloggers, cleaners, etc).

Use Rootkit Scanners (chkrootkit, rkhunter).

Double SSH Security (Key + Password).

Use AES 256 Encryption on home folders/personal files.

Enabled Software Limiters (Fail2Ban, AppArmor).

Verify System Integrity via fsck.

Utilize ngrep/other networking apps to monitor traffic.

Utilize common honeypot software (endlessh).

Create new system-launch subroutines via crontab or shell scripts.

Ensure System Backups are Enabled (rsnapshot).

Check for suspicious kernel modules with "lsmod"

[cyber-sec]

Hackers Snuck Raspberry Pi into ATM Networks to Evade Detection

UNC2891 physically installed a Raspberry Pi inside bank networks, then hid backdoor processes using obscure Linux tricks—letting them bypass firewalls and forensic tools with alarming ease.

Source: Group-IB

Read more: CyberSecBrief

[ferramroberto]

KDE Linux rimuove Zen Kernel, AUR e moduli non sicuri, rafforzando sicurezza e coerenza del suo sistema immutabile basato su Flatpak. #KDELinux #KDE #LinuxSecurity #ImmutableOS #Flatpak #Linux

KDE Linux rafforza la sicurezza: addio Zen Kernel e stop all’uso di AUR

[ferramroberto]

Rocky Linux 10.2 introduce crittografia post‑quantum, nuovi strumenti per installazione e gestione, aggiornamenti dei componenti e miglioramenti per utenti Linux. #RockyLinux #PostQuantum #LinuxSecurity #OpenSource #SysadminLife

Rocky Linux 10.2 Rilasciato arriva la crittografia post‑quantum

[wedostreaming]

A recently discovered Linux security vulnerability known as CVE-2026-31431 is drawing attention because many IPTV platforms rely on Linux-based servers to deliver streams and manage user access. A flaw like this could potentially affect server stability, streaming performance, uptime, and overall service reliability if left unpatched. For IPTV users, this raises important questions about buffering issues, outages, and possible security concerns. Read the full guide here: https://www.wedostreaming.com/cve-2026-31431-iptv-servers-impact/

[my-hostperl]

How to Remove Malware from Linux VPS - Hostperl

Learn how to remove malware from a Linux VPS using structured incident response, advanced scanning, integrity checks, and server hardening b

[my-hostperl]

Harden Ubuntu 24.04 Against Brute Force Attacks - Hostperl

Learn how we harden Ubuntu 24.04 servers against brute force attacks using Fail2Ban, CrowdSec, firewall rate limiting, and production-ready