Security Archives - Page 3 of 10

Ditch the SSH Key Mess: Centralized Access with Smallstep Certificates

May 17, 2026

Say goodbye to the 'authorized_keys' mess. This guide shows you how to implement SSH Certificates with Smallstep for a centralized, SSO-integrated, and highly secure infrastructure.

Security

Killing the Manual Audit: Automated Android Security with MobSF and Docker

May 16, 2026

Ditch manual decompilation. Learn to deploy MobSF on Docker for rapid Android security audits, catching hardcoded secrets and OWASP vulnerabilities in minutes.

Security

6 Months of Linux Threat Hunting with Chainsaw and Sigma: A Field Report

May 15, 2026

Ditch reactive logging. I spent six months using Chainsaw and Sigma rules to build a proactive Linux threat hunting workflow that scans 10GB of logs in seconds.

Security

Automating Infrastructure Security: A Hands-On Guide to Nuclei

May 14, 2026

Ditch the manual security audits. Learn how to use Nuclei to automate vulnerability scanning on your Linux servers with community-verified templates.

Security

Ditch Static Secrets: A Practical Guide to GitHub Actions OIDC

May 13, 2026

Ditch the risk of long-lived AWS and GCP access keys. This guide shows you how to implement OIDC in GitHub Actions to secure your CI/CD with short-lived, self-destructing tokens.

Security

Identity-Based SSH: Why I Finally Closed Port 22 and Ditched Key Management

May 12, 2026

Is SSH key management slowing you down? Switch to identity-based authentication with Tailscale. Close Port 22, use your SSO for access, and simplify your server security in under 20 minutes.

Security

Stop Using Passwords: A Practical Guide to Implementing Passkeys (WebAuthn)

May 12, 2026

Ditch vulnerable passwords for good. This guide walks you through the technical steps and UX best practices for implementing phishing-resistant Passkeys in your web application.

Security

Hunting BOLA: How to Audit Your API Security with OWASP ZAP

May 12, 2026

BOLA is the top risk for modern APIs. Discover how to use OWASP ZAP to automate your security testing, find authorization bugs, and harden your code.

Security

Centralizing Vulnerability Management: A Practical Guide to DefectDojo, Trivy, and Semgrep

May 10, 2026

Streamline your security workflow by centralizing findings from Trivy, Nmap, and Semgrep. This guide walks you through setting up DefectDojo and automating your vulnerability management.

Security

Masking PII in System Logs: A Fluent Bit Guide to Redacting Emails, IPs, and Passwords

May 10, 2026

Leaking PII in system logs is a major compliance risk. This guide shows you how to use Fluent Bit's modify and Lua filters to mask emails, IPs, and passwords at the source.