Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

Guardian Digital Celebrates 20 Years of Revolutionizing Digital Security, Securing Email with Open Source - Pioneers of business email security for the past 20 years, Guardian Digital draws on the merits of Open Source coupled with expert engineering and unparalleled customer support.

Press Release: Guardian Digital Leverages the Power of Open Source to Combat Evolving Email Security Threats - Cloud-based email security solution utilizes the open source methodology for securing business email, recognized by many as the best approach to the problem of maintaining security in the relentlessly dynamic environment of the Internet.


  House of Representatives Passes Election Security Bill (Jul 1)
 

The House of Representatives passed an election security bill Thursday that is designed to prohibit cyberinterference through the forms of paper ballot voting, postelection audit, and replacing voting equipment.

  Google University of Chicago Medical Center Accused of Sharing Patients Data (Jul 1)
 

Google and the University of Chicago Medical Center formed a partnership approximately two years ago with the goal of finding patterns in patients medical records for medicine and to better understand disease.

  US Cyber Command warns nation-state hackers are exploiting old Microsoft Outlook bug. Make sure you’re patched! (Jul 3)
 

US Cyber Command has issued a warning about an unnamed foreign countrys attempt to spread malware through the exploitation of a vulnerability in Microsoft Outlook.

  Google hopes to standardize robots.txt by going open source (Jul 2)
 

Google is releasing robots.txt to the open-source community in the hopes that the system will, one day, becoming a stable internet standard.

  OpenSSH to protect keys in memory against side-channel attacks (Jul 2)
 

The OpenSSH project has received a patch that prevents private keys from being stolen through hardware vulnerabilities that allow hackers to access restricted memory regions from unprivileged processes. The same approach could be used by other software application to protect their secrets in RAM until the issues are fixed in future generations of SDRAM chips and CPUs.

  New Golang malware plays the Linux field in quest for cryptocurrency (Jul 4)
 

A new form of malware has been spotted in the wild by cybersecurity companies which say the code's main focus is the fraudulent mining of the Monero (XMR) cryptocurrency.

  China's Border Guards Secretly Installing Spyware App on Tourists' Phones (Jul 3)
 

Chinese authorities are secretly installing surveillance apps on smartphones of foreigners at border crossings in the Xinjiang region who are entering from neighboring Kyrgyzstan, an international investigation revealed.

  OpenPGP experts targeted by long-feared ‘poisoning’ attack (Jul 5)
 

Somebody out there has taken a big dislike to Robert J. Hansen (rjh) and Daniel Kahn Gillmor (dkg), two well-regarded experts in the specialised world of OpenPGP email encryption.

  10+ million Android users installed a fake Samsung update app (Jul 5)
 

In recent months, weve seen quite a few reports of the Google Play Store hosting counterfeit apps that are designed to dupe users and earn money through ad farms. In the latest reveal, CSIS Security Groups report suggests that a fake app " promising updates for Samsung phones " has been installed by over 10 million users.

  Canonical GitHub account hacked, Ubuntu source code safe (Jul 7)
 

The GitHub account of Canonical Ltd., the company behind the Ubuntu Linux distribution, was hacked on Saturday, July 6.