Security – ITFROMZERO – Share tobe shared!

Using systemd-analyze security to Harden Linux Services: From 9.6 to 2.0 in 5 Minutes

By admin September 12, 2026

Don't let your services run with loose root privileges. Learn how to use systemd-analyze security to score and harden Linux service security in a few simple steps.

Security

Blocking Bad Bots & Scrapers with Nginx Map: The Optimal Solution for ‘Overloaded’ Servers

By admin September 11, 2026

A detailed guide on using the Nginx Map Module to block bad bots and scrapers. A practical solution to reduce CPU load and optimize server performance.

Security

Deploying TheHive & Cortex with Docker: The SOC ‘Weapon’ to End Manual Alert Management

By admin September 10, 2026

Stop managing alerts with Excel. A detailed guide on deploying TheHive and Cortex on Docker to build a professional open-source SOAR system for your SOC.

Security

DNS Firewall with BIND9 RPZ: Nipping Malware and Phishing in the Bud

By admin September 9, 2026

A DNS Firewall using BIND9 RPZ blocks up to 92% of malicious connections from malware and phishing. Here is a detailed guide on configuring Sinkholes and managing blacklists.

Security

Protecting SSH Keys with TPM 2.0 on Linux: Private Keys That Can’t Be Stolen Even with Root Access

By admin September 8, 2026

A practical guide to protecting SSH private keys with TPM 2.0 on Linux: keys are stored inside the hardware chip and cannot be stolen even if an attacker has root access. Covers installing tpm2-pkcs11, generating keys inside the TPM, and configuring SSH with PKCS11Provider so no key file ever touches disk.

Security

Subresource Integrity (SRI): The ‘Armor’ Against Malware When Using CDNs

By admin September 7, 2026

Learn how to implement Subresource Integrity (SRI) to protect your website from supply chain attacks when using third-party libraries from CDNs.

Security

Ansible Vault: Encrypting Secrets in Playbooks and Storing Them Safely in Git

By admin September 4, 2026

Hardcoding secrets in your Ansible Playbook and committing them to Git is the fastest way to lose a server. This article compares 4 approaches to managing secrets in Ansible — from env vars to HashiCorp Vault — and walks through implementing Ansible Vault step by step: the built-in, free solution that's secure enough for most teams.

Security

Systemd Hardening: Securing Services with ProtectSystem, ProtectHome, and PrivateTmp

By admin September 3, 2026

systemd ships with powerful built-in hardening features — ProtectSystem, ProtectHome, and PrivateTmp — that isolate services at the kernel level with no extra software required. This guide covers practical configuration steps and how to verify effectiveness with systemd-analyze security.