Security Archives

Deploy CrowdSec on Linux: Building a Distributed IPS to Block Brute Force and Web Attacks

October 19, 2026

Tired of isolated log parsers missing distributed brute-force sweeps? Here is how to deploy CrowdSec on Linux to shut down coordinated SSH and web attacks using collaborative, crowd-sourced threat intelligence.

Security

Preventing Cross-Site WebSocket Hijacking (CSWSH): Securing Real-Time Connections

October 18, 2026

Cross-Site WebSocket Hijacking (CSWSH) allows malicious websites to hijack authenticated real-time data feeds. Discover how to inspect the Origin header, implement one-time tickets, and configure reverse proxies to keep WebSocket connections secure.

Security

Automated Malware Analysis with CAPEv2 Sandbox on Linux: Build an Isolated Detonation Chamber to Extract IOCs

October 17, 2026

When fresh malware bypasses static antivirus filters during an active incident, automated dynamic analysis is your fastest triage route. Learn how to configure CAPEv2 on Ubuntu and KVM to dump memory and extract actionable C2 indicators in minutes.

Security

Deploy Velociraptor on Linux: Real-Time Endpoint DFIR and Threat Hunting Guide

October 17, 2026

Deploy Velociraptor on Linux to build a fast, query-driven endpoint DFIR and threat hunting system. Learn how to install the server, deploy client agents, write custom VQL artifacts, and secure your forensic pipeline.

Security

Deploying ModSecurity and OWASP CRS on Nginx: Open-Source WAF Setup

October 15, 2026

Deploy ModSecurity v3 and OWASP CRS v4 on Nginx to block zero-day probes and OWASP Top 10 exploits. Includes dynamic module builds, anomaly scoring setup, and live verification.

Security

Hardening Nginx with Content Security Policy (CSP) and HTTP Security Headers

October 15, 2026

When an unauthenticated injection triggered a 2 AM emergency, missing HTTP headers left customer browsers wide open. Here is how to configure Content Security Policy (CSP), X-Frame-Options, and HSTS directly in Nginx to block XSS and clickjacking.

Security

Securing Private Container Registries with Harbor: Automated Vulnerability Scanning, Cosign Signing, and Deployment Enforcement

October 12, 2026

A private registry alone won't keep vulnerable containers out of production. Without automated gates, unvetted base layers and tampered tags slip right through. Here is how Harbor combines Trivy scanning, Cosign digital signatures, and strict pull-prevention policies to lock down your supply chain.

Security

SSH Two-Factor Authentication with Google Authenticator PAM on Linux

October 12, 2026

Relying strictly on SSH keys leaves servers exposed if developer laptops or credentials are compromised. This guide explains how to integrate Google Authenticator PAM with OpenSSH to require both a private key and a dynamic TOTP code on Linux.

Security

Deploying Apache Guacamole as a Bastion Host on Docker: Secure Web-Based SSH and RDP with 2FA

October 11, 2026

Learn how to build a clientless bastion host with Apache Guacamole, Docker, and PostgreSQL. Secure your internal SSH and RDP endpoints behind a browser-based gateway protected by TOTP two-factor authentication.

Security

Deploy External Secrets Operator on Kubernetes: Sync Vault and Cloud Secret Managers

October 10, 2026

Sync secrets safely into Kubernetes without committing credentials to Git. This hands-on guide walks through the trade-offs of modern secret management and shows how to set up External Secrets Operator (ESO) with HashiCorp Vault and cloud providers.