Security Archives - Page 5 of 10

Stop Shipping Vulnerabilities: Automating SAST with Semgrep

April 29, 2026

Catch vulnerabilities before they hit production. This guide shows you how to use Semgrep to automate security scans in your CI/CD pipeline, reducing manual review time and preventing costly leaks.

Security

OAuth 2.0 and OpenID Connect Security: Common Vulnerabilities and How to Implement Them Correctly

April 28, 2026

OAuth 2.0 and OpenID Connect are the backbone of modern authentication, but misconfiguration is common and costly. This guide covers the most frequent vulnerabilities — missing state parameters, open redirects, improper token validation — and shows you how to implement each step correctly with practical Python examples.

Security

Hunting Leaked Secrets: Using TruffleHog to Secure Your Git History

April 28, 2026

Accidentally committed an API key? Learn how to use TruffleHog to scan your Git history, verify if secrets are still active, and remove them permanently.

Security

Automating SSL/TLS Certificate Lifecycle Management with cert-manager on Kubernetes

April 27, 2026

Manual SSL certificate management fails at scale — expiry dates get missed, secrets fall out of sync, and incidents happen over weekends. This guide walks through setting up cert-manager on Kubernetes to automate certificate issuance and renewal from both Let's Encrypt and a private internal CA, so you never chase an expiry date again.

Security

Hunting Rootkits: A Practical Guide to Linux RAM Forensics with Volatility 3

April 26, 2026

Move beyond basic logs. This practical guide shows you how to use Volatility 3 to capture Linux RAM and uncover the most stealthy rootkits and hidden processes.

Security

Kubernetes RBAC Complete Guide: Configuring Role, ClusterRole, and ServiceAccount for Least Privilege Access

April 25, 2026

Kubernetes RBAC is your first line of defense against lateral movement inside a cluster. This guide walks through creating custom Roles, ClusterRoles, and ServiceAccounts with least privilege — including verification steps and common pitfalls to avoid.

Security

Hardening the Kernel: How I Use Seccomp and Linux Capabilities to Stop Escalation

April 24, 2026

Stop privilege escalation before it starts. A senior engineer explains how to use Seccomp and Linux Capabilities to shrink your kernel attack surface based on real-world incident response.

Security

Hardening Your API Gateway: Distributed Rate Limiting with Nginx and Redis

April 22, 2026

Protect your infrastructure from traffic spikes and resource abuse. This guide shows you how to build a distributed rate-limiting system using Nginx, OpenResty, and Redis.

Security

Kill the 2 AM Password Prompt: Auto-Unlock LUKS with TPM 2.0

April 21, 2026

Stop typing LUKS passphrases manually. This guide shows you how to use TPM 2.0 and Clevis to securely automate disk decryption on Linux, ensuring your servers reboot without intervention.

Security

Linux Ransomware: Building the ‘Impossible to Encrypt’ Server

April 19, 2026

Recovering from ransomware at 2 AM is a nightmare. Learn how to use Linux immutable attributes and S3 Object Lock to build a server that physically rejects encryption attempts.