Security Archives - ITFROMZERO - Share tobe shared!

How to Install and Configure Fail2ban on Linux: Hands-On Defense Against SSH and Nginx Brute Force

By IT From Zero October 7, 2026

A step-by-step guide to installing and configuring Fail2ban on Linux to block SSH and Nginx brute-force attacks, with real-world unban tips and incremental ban rules for repeat offenders.

Security

Securing PostgreSQL Server on Linux: Hands-on with pg_hba.conf, pgcrypto, and pgaudit

By IT From Zero October 6, 2026

Protect PostgreSQL on Linux across 3 layers: restrict IPs with pg_hba.conf, encrypt sensitive columns with pgcrypto, and audit logs for SOC2/PCI-DSS with pgaudit.

Security

How to Use Kube-bench to Audit Kubernetes Security Against CIS Benchmarks

By IT From Zero October 3, 2026

A hands-on guide to scanning vulnerabilities and hardening Kubernetes cluster security against CIS Benchmarks using Kube-bench based on real-world experience.

Security

A Guide to Network Packet Capture and Analysis with Tshark on Linux: Investigating Anomalous Traffic and Detecting Attacks from the CLI

By IT From Zero October 1, 2026

A practical guide to capturing and analyzing network packets from the Linux command line using Tshark to investigate port scans, detect DNS anomalies, and stop SSH brute-force attacks.

Security

3 Pro GraphQL Security Tips: Don’t Hand Hackers the Keys to Your Kingdom

By IT From Zero September 23, 2026

Securing GraphQL isn't hard if you know these 3 techniques: Disabling Introspection, limiting Query Depth, and applying Rate Limiting at the Resolver level. Check out the detailed guide with code samples here.

Security

Securing Sudo with 2FA: The Final Defense Against Root Hijacking

By IT From Zero September 23, 2026

Hackers have your password but not your phone? They'll be stopped in their tracks. A guide to adding a 2FA layer to sudo for ultimate root protection on Linux.

Security

Using systemd-analyze security to Harden Linux Services: From 9.6 to 2.0 in 5 Minutes

By IT From Zero September 12, 2026

Don't let your services run with loose root privileges. Learn how to use systemd-analyze security to score and harden Linux service security in a few simple steps.

Security

Blocking Bad Bots & Scrapers with Nginx Map: The Optimal Solution for ‘Overloaded’ Servers

By IT From Zero September 11, 2026

A detailed guide on using the Nginx Map Module to block bad bots and scrapers. A practical solution to reduce CPU load and optimize server performance.