Security Archives - Page 4 of 10

Making SSH Invisible: Securing Servers with Single Packet Authorization (SPA) and fwknop

May 7, 2026

Secure your Linux servers by making SSH ports invisible to scanners. This guide explains how to implement Single Packet Authorization (SPA) with fwknop to stop brute force attacks at the firewall level.

Security

Running Docker Without Root: Stop Container Escapes Before They Start

May 7, 2026

Is your Docker daemon running as root? You're one exploit away from a total host takeover. Learn how to set up Rootless Docker to contain attacks and secure your production Linux servers.

Security

Lock Down Your Linux Box: A YubiKey Guide for SSH and Sudo

May 4, 2026

Secure your Linux environment by moving beyond passwords. This guide covers FIDO2 SSH setup, sudo PAM integration, and best practices for managing physical security keys.

Security

Hardening Docker Web Apps with BunkerWeb: Integrated WAF, Fail2Ban, and Let’s Encrypt Guide

May 4, 2026

Learn how to secure your Docker applications using BunkerWeb, a hardened Nginx-based web server. This tutorial covers automated WAF, Fail2Ban, and Let's Encrypt configuration using a hands-on, experience-driven approach.

Security

Hardening Linux: Using OpenSCAP to Automate CIS Benchmark Compliance

May 4, 2026

Stop guessing your server's security status. Learn to use OpenSCAP to audit Linux systems against CIS Benchmarks, replacing manual checklists with automated, repeatable security.

Security

Beyond the Perimeter: A 6-Month Post-Mortem on mTLS with Nginx

May 3, 2026

A deep dive into implementing Mutual TLS (mTLS) with Nginx and OpenSSL. Explore real-world performance metrics, automation strategies, and security benefits after 6 months in production.

Security

The Silent Alarm: Using Canarytokens to Detect Breaches Before the Damage Spreads

May 3, 2026

Detect breaches before the damage spreads. This guide shows you how to deploy Canarytokens—digital tripwires and decoy files that alert you to intruders with zero false positives.

Security

Hardening JWT: Real-World Lessons from 6 Months in API Production

May 2, 2026

Practical JWT security lessons from 6 months in production. Learn why you should migrate to RS256, how to handle revocation with Redis, and how to stop 'none' algorithm attacks.

Security

Securing Your Software Supply Chain: A Practical Guide to Syft and Grype

May 2, 2026

Master software supply chain security with Syft and Grype. Learn how to generate verifiable SBOMs and automate vulnerability scanning for all your third-party dependencies.

Security

Stop Trusting Tags: Secure Your Container Supply Chain with Cosign

April 29, 2026

Container tags are easily spoofed. Learn how to use Cosign and Sigstore to sign your images and protect your Kubernetes clusters from supply chain attacks.