security Archives - Page 7 of 11

Running Docker Without Root: Stop Container Escapes Before They Start

May 7, 2026

Is your Docker daemon running as root? You're one exploit away from a total host takeover. Learn how to set up Rootless Docker to contain attacks and secure your production Linux servers.

Linux

Mastering Sudo I/O Logging: How to Record and Replay Linux User Sessions

May 5, 2026

Capture every keystroke and terminal output in Linux. This guide shows you how to configure Sudo I/O logging for session recording, auditing, and visual replay.

Security

Lock Down Your Linux Box: A YubiKey Guide for SSH and Sudo

May 4, 2026

Secure your Linux environment by moving beyond passwords. This guide covers FIDO2 SSH setup, sudo PAM integration, and best practices for managing physical security keys.

Security

The Silent Alarm: Using Canarytokens to Detect Breaches Before the Damage Spreads

May 3, 2026

Detect breaches before the damage spreads. This guide shows you how to deploy Canarytokens—digital tripwires and decoy files that alert you to intruders with zero false positives.

Security

Securing Your Software Supply Chain: A Practical Guide to Syft and Grype

May 2, 2026

Master software supply chain security with Syft and Grype. Learn how to generate verifiable SBOMs and automate vulnerability scanning for all your third-party dependencies.

Linux

Linux Environment Variables: From Local Shells to Production Servers

May 1, 2026

Master Linux environment variables with this practical guide. Learn the differences between .bashrc and /etc/environment, how to handle .env files, and best practices for securing production secrets.

Security

Stop Shipping Vulnerabilities: Automating SAST with Semgrep

April 29, 2026

Catch vulnerabilities before they hit production. This guide shows you how to use Semgrep to automate security scans in your CI/CD pipeline, reducing manual review time and preventing costly leaks.

Security

OAuth 2.0 and OpenID Connect Security: Common Vulnerabilities and How to Implement Them Correctly

April 28, 2026

OAuth 2.0 and OpenID Connect are the backbone of modern authentication, but misconfiguration is common and costly. This guide covers the most frequent vulnerabilities — missing state parameters, open redirects, improper token validation — and shows you how to implement each step correctly with practical Python examples.

Security

Automating SSL/TLS Certificate Lifecycle Management with cert-manager on Kubernetes

April 27, 2026

Manual SSL certificate management fails at scale — expiry dates get missed, secrets fall out of sync, and incidents happen over weekends. This guide walks through setting up cert-manager on Kubernetes to automate certificate issuance and renewal from both Let's Encrypt and a private internal CA, so you never chase an expiry date again.

HomeLab

Stop Renting Your Security: Self-Host Vaultwarden on Docker

April 27, 2026

Tired of cloud breaches and monthly fees? Learn how to host your own lightweight, secure password vault using Vaultwarden and Docker in under 10 minutes.