security Archives - Page 2 of 9

Kubernetes Security Auditing: Hardening Clusters with kube-bench and kube-hunter

May 29, 2026

Is your Kubernetes cluster actually secure? Move beyond default settings by using kube-bench and kube-hunter to audit for CIS compliance and discover active vulnerabilities.

Linux

Modern Linux User Management with systemd-homed: Encryption, Quotas, and Portability

May 29, 2026

Ditch traditional /etc/passwd management for systemd-homed. Learn to configure encrypted, portable user accounts and dynamic disk quotas on modern Linux systems.

Networking

Unbound DNS Resolver Setup Guide: Build a Secure Recursive DNS Server with DNSSEC Validation

May 28, 2026

Learn how to install and configure Unbound as a recursive DNS resolver with DNSSEC validation on Linux. This step-by-step guide covers quick setup, split-horizon DNS, rate limiting, and production tips for homelab and small enterprise environments.

Database

Hardening Multi-tenant Apps: Why You Need PostgreSQL Row Level Security

May 28, 2026

Discover how PostgreSQL Row Level Security (RLS) provides a native, foolproof layer of protection for multi-tenant apps. Stop relying on manual filters and secure your data at the source.

Networking

DNS Sinkholing with BIND9: Kill Malware at the Network Edge

May 27, 2026

Build a network-wide DNS Sinkhole using BIND9 RPZ to block malicious domains, C2 callbacks, and ads at the source.

Security

WordPress Security Hardening: Stop Brute Force, SQLi, and RCE Before They Hit

May 25, 2026

Harden your WordPress site against brute force, SQL injection, and remote code execution using a layered approach: security plugins, Nginx rate limiting, file integrity monitoring, and database privilege restriction. Practical commands and configs included.

DevOps

Docker Multi-stage Build and Distroless Images: Shrink Your Container to Just a Few MB

May 25, 2026

Learn how to use Docker multi-stage builds and distroless base images to shrink your container from 1 GB down to just a few MB — with real Dockerfile examples for Go, Node.js, Python, and Java. Includes security hardening tips and CVE reduction techniques for production deployments.

Linux

Locking Down SFTP: A Field Guide to Chroot Jails on Linux

May 24, 2026

Isolate SFTP users and prevent lateral movement. This production-ready guide walks you through OpenSSH Chroot Jails, strict permission mapping, and monitoring strategies.

Security

Stop SSRF in Its Tracks: A Hardened Guide to API & Web Security

May 24, 2026

Is your server secretly attacking your internal network? Learn how to prevent SSRF vulnerabilities using Python IP validation, AWS IMDSv2, and network-level egress filtering.

Security

Hardening Redis for Production: A Practical Guide to ACLs, TLS, and Isolation

May 23, 2026

Redis is fast, but its default settings are a security risk. Learn how to implement ACLs, TLS, and network isolation to protect your production data.