LinuxSecurity.com

Hetzner says customers using PXE boot should hold off on server restarts.

Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.

A program could get past some Linux security rules by changing the number it sends with a request.

Attackers are exploiting a flaw in Brotli, Google's software for unpacking compressed data.

A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player's computer.

An MCP security flaw in Google's open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on that machine.

An AI coding assistant tried to add harmful code to a real open-source project during a security test.

Start Linux server monitoring with the checks you would otherwise make by hand.

Plan Linux log management around the records needed to investigate a break-in or an unauthorized change.