Security Archives - Page 5 of 11

Centralizing Vulnerability Management: A Practical Guide to DefectDojo, Trivy, and Semgrep

May 10, 2026

Streamline your security workflow by centralizing findings from Trivy, Nmap, and Semgrep. This guide walks you through setting up DefectDojo and automating your vulnerability management.

Security

Masking PII in System Logs: A Fluent Bit Guide to Redacting Emails, IPs, and Passwords

May 10, 2026

Leaking PII in system logs is a major compliance risk. This guide shows you how to use Fluent Bit's modify and Lua filters to mask emails, IPs, and passwords at the source.

Security

Making SSH Invisible: Securing Servers with Single Packet Authorization (SPA) and fwknop

May 7, 2026

Secure your Linux servers by making SSH ports invisible to scanners. This guide explains how to implement Single Packet Authorization (SPA) with fwknop to stop brute force attacks at the firewall level.

Security

Running Docker Without Root: Stop Container Escapes Before They Start

May 7, 2026

Is your Docker daemon running as root? You're one exploit away from a total host takeover. Learn how to set up Rootless Docker to contain attacks and secure your production Linux servers.

Security

Lock Down Your Linux Box: A YubiKey Guide for SSH and Sudo

May 4, 2026

Secure your Linux environment by moving beyond passwords. This guide covers FIDO2 SSH setup, sudo PAM integration, and best practices for managing physical security keys.

Security

Hardening Docker Web Apps with BunkerWeb: Integrated WAF, Fail2Ban, and Let’s Encrypt Guide

May 4, 2026

Learn how to secure your Docker applications using BunkerWeb, a hardened Nginx-based web server. This tutorial covers automated WAF, Fail2Ban, and Let's Encrypt configuration using a hands-on, experience-driven approach.

Security

Hardening Linux: Using OpenSCAP to Automate CIS Benchmark Compliance

May 4, 2026

Stop guessing your server's security status. Learn to use OpenSCAP to audit Linux systems against CIS Benchmarks, replacing manual checklists with automated, repeatable security.

Security

Beyond the Perimeter: A 6-Month Post-Mortem on mTLS with Nginx

May 3, 2026

A deep dive into implementing Mutual TLS (mTLS) with Nginx and OpenSSL. Explore real-world performance metrics, automation strategies, and security benefits after 6 months in production.

Security

The Silent Alarm: Using Canarytokens to Detect Breaches Before the Damage Spreads

May 3, 2026

Detect breaches before the damage spreads. This guide shows you how to deploy Canarytokens—digital tripwires and decoy files that alert you to intruders with zero false positives.

Security

Hardening JWT: Real-World Lessons from 6 Months in API Production

May 2, 2026

Practical JWT security lessons from 6 months in production. Learn why you should migrate to RS256, how to handle revocation with Redis, and how to stop 'none' algorithm attacks.