Security Projects

We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.

Discover Security Projects News

Strengthen Your Linux Software Development Pipeline with Code Security Scanners

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Developers recognize the critical nature of protecting software systems as cyberattacks grow more sophisticated, thus necessitating robust security measures in development lifecycle processes. Code security scanners play a vital role here. These tools are intended to detect, mitigate, and prevent security vulnerabilities in code, improving integrity, reliability, and security for software systems.

OpenSSL's New Governance Structure: A Beacon of Progress for Open-Source Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

On July 24, 2024, OpenSSL took an extraordinary step toward improving community engagement and realigning with its core values when it announced the implementation of a new governance framework and the launch of several projects under its mission statement. This event marks a historic moment for OpenSSL and Linux administrators worldwide who depend on this foundational technology for secure applications.

OpenSSH Introduces Options to Penalize Undesirable Behavior

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

An update to OpenSSH, an open-source implementation of the Secure Shell (SSH) protocol, will introduce options to penalize unwanted behavior and increase security. This will give Linux admins greater control over their systems and improve security. These options will be available in the upcoming OpenBSD 7.6 release.

Linux Kernel 6.9 Released with Critical Fixes & Upgrades

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The recently released Linux Kernel 6.9 brings forth a blend of crucial upgrades and enhancements, catering to the ever-evolving needs of the Linux ecosystem. Linus Torvalds, the creator of Linux, underscores this by stating, "a more powerful arm64 machine (thanks to Ampere)," signaling promising optimizations for ARM64 architecture in this new release.

AlmaLinux 9.4 Reinforces Robust Linux Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The recent release of AlmaLinux 9.4, closely aligned with Red Hat Enterprise Linux (RHEL) 9.4, presents Linux admins and infosec professionals with an enhanced open-source enterprise Linux solution. AlmaLinux 9.4 is built directly from RHEL's open-source source code, demonstrating the community's ability to deliver prompt updates. Let's explore this release's implications, long-term consequences, and impact on security practitioners.

Linux Mint 22 Will Bring XApp Independence, Improved Security, and Compatibility

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp, GNOME applications, and the Software Manager. These changes aim to enhance the overall user experience within the Linux Mint ecosystem, bolster security, and improve compatibility. Let's examine what you have to look forward to in Linux Mint 22 and the implications of these changes for Linux admins and security practitioners.

How Debian 12 is Redefining Stability and Innovation in Open-Source OSes

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The latest release of Debian, one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and innovation in open-source OSes. As security practitioners and Linux administrators, we always seek stable and innovative operating systems that can meet our needs while keeping our systems secure.

CoCo VMs Will Now Panic If RdRand Is Broken in Linux 6.9

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A significant change has been merged into the x86 fixes for Linux 6.9, requiring the seeding of RNG (Random Number Generation) with RdRand for CoCo (Confidential Computing) environments. The change focuses on CoCo virtual machines, designed to be as isolated as possible, assuming the VM host is untrusted. RdRand is critical as a hardware random number generator instruction for entropy to guest VMs. Security expert and WireGuard developer Jason Donenfeld authored this change.

Tails 6.1 Released with Security, User Experience Enhancements

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Tails 6.1 has been released as the latest version of the renowned Linux distribution focused on privacy and anonymity. This critical analysis will delve into the release's key updates and improvements, discuss the implications for security practitioners, and explore potential long-term consequences.

It’s Time to Add Some GUAC to Open-Source Supply Chain Security!

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Integrating the Graph for Understanding Artifact Composition (GUAC)  in the open-source security framework has tremendous potential to improve software supply chain security. GUAC is an initiative introduced by Google, Kusari, Purdue University, and Citi that aggregates software security metadata into a high-fidelity graph database.

Fedora vs. Ubuntu: Which More Secure, Faster & More User-Friendly?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Ubuntu and Fedora are two prominent Linux distributions, each offering its own set of strengths and features. Ubuntu, created by Canonical Ltd., boasts a user-friendly interface, stable performance, and a vast repository of pre-installed and downloadable software. On the other hand, Fedora prides itself on being an innovative and secure platform, perfect for experienced Linux users who desire the latest technological advancements.