security Archives

Hardening Your CI/CD Pipeline: A Practical Guide to SCA, SAST, and DAST

June 3, 2026

Catch vulnerabilities before they reach production. This guide shows you how to integrate SCA, SAST, and DAST into your CI/CD pipeline for a 'Shift Left' security approach.

Programming

Building a Rate Limiter from Scratch in Go: Token Bucket Algorithm for API Protection

June 2, 2026

Building rate limiting from scratch reveals what's actually happening inside the libraries you'd normally reach for. This tutorial walks through implementing a concurrent-safe Token Bucket rate limiter in Go — from the core algorithm to HTTP middleware — with practical parameter tuning advice for production use.

Linux

Linux SUID, SGID, and Sticky Bit: Master Special Permissions for System Security

June 2, 2026

SUID, SGID, and Sticky Bit are Linux's special permission bits that control privilege elevation and file ownership inheritance. Here's how each one works internally, when to actually use them in production, and how to audit your system before someone else finds the misconfigurations.

Security

How to Build a Lightweight Pen-Testing Lab with Docker (DVWA & Metasploitable)

May 31, 2026

Forget heavy VMs. Build a lightweight, legal penetration testing lab using DVWA and Metasploitable on Docker. A battle-tested guide for rapid security practice.

Security

Kubernetes Security Auditing: Hardening Clusters with kube-bench and kube-hunter

May 29, 2026

Is your Kubernetes cluster actually secure? Move beyond default settings by using kube-bench and kube-hunter to audit for CIS compliance and discover active vulnerabilities.

Linux

Modern Linux User Management with systemd-homed: Encryption, Quotas, and Portability

May 29, 2026

Ditch traditional /etc/passwd management for systemd-homed. Learn to configure encrypted, portable user accounts and dynamic disk quotas on modern Linux systems.

Networking

Unbound DNS Resolver Setup Guide: Build a Secure Recursive DNS Server with DNSSEC Validation

May 28, 2026

Learn how to install and configure Unbound as a recursive DNS resolver with DNSSEC validation on Linux. This step-by-step guide covers quick setup, split-horizon DNS, rate limiting, and production tips for homelab and small enterprise environments.

Database

Hardening Multi-tenant Apps: Why You Need PostgreSQL Row Level Security

May 28, 2026

Discover how PostgreSQL Row Level Security (RLS) provides a native, foolproof layer of protection for multi-tenant apps. Stop relying on manual filters and secure your data at the source.

Networking

DNS Sinkholing with BIND9: Kill Malware at the Network Edge

May 27, 2026

Build a network-wide DNS Sinkhole using BIND9 RPZ to block malicious domains, C2 callbacks, and ads at the source.

Security

WordPress Security Hardening: Stop Brute Force, SQLi, and RCE Before They Hit

May 25, 2026

Harden your WordPress site against brute force, SQL injection, and remote code execution using a layered approach: security plugins, Nginx rate limiting, file integrity monitoring, and database privilege restriction. Practical commands and configs included.