Security Archives - Page 10 of 12 - ITFROMZERO

Mastering SELinux Custom Policies: Don’t Disable Security Just Because of ‘Permission Denied’

By IT From Zero April 5, 2026

Don't disable SELinux just because of a Permission Denied error. Learn how to create Custom Policies to protect Linux servers using the Principle of Least Privilege.

Security

Nginx Limit Request: A Shield Against ‘Guerrilla’ DDoS and Effective Traffic Throttling

By IT From Zero April 1, 2026

Nginx Limit Request is an effective weapon against Layer 7 DDoS and spam bots. This guide covers detailed configurations for burst and nodelay, plus real-world traffic management tips.

Security

Runtime Security for Kubernetes with Falco: Real-time Anomaly Detection

By IT From Zero March 28, 2026

Runtime security is key to protecting Kubernetes from threats hidden deep within containers. Falco, a powerful anomaly detection tool, helps you monitor and alert in real-time. This article guides you through installation, custom rule configuration, and practical tips to make Falco a robust shield for your cluster.

Security

How to Install and Use OpenVAS (Greenbone) for Linux Server Vulnerability Scanning

By IT From Zero March 28, 2026

Protecting Linux servers from attacks requires regular vulnerability scanning. This article will guide you step-by-step through installing and using OpenVAS (Greenbone Vulnerability Management), a powerful tool, to proactively detect and remediate weaknesses in your system.

Security

Securing Microservices Communication with mTLS and SPIFFE/SPIRE: Real-World Tips

By IT From Zero March 28, 2026

Securing communication between microservices is a significant challenge. This article guides you through implementing Mutual TLS (mTLS) and using SPIFFE/SPIRE for service identity management. From quick setup to practical tips, I share personal experience to help you build secure microservices systems following a Zero Trust model.

Security

OWASP ZAP Guide: Web Application Vulnerability Scanning from Basics to CI/CD Automation

By IT From Zero March 25, 2026

This article shares practical experience with OWASP ZAP. It guides you through web application vulnerability scanning, from basic installation and configuration to automated CI/CD integration. The goal is to help you effectively protect your applications, detect security risks early, and maintain a secure system.

Security

Kubernetes Security: Essential Steps to Protect Your Cluster

By IT From Zero March 23, 2026

A Kubernetes cluster has numerous security vulnerabilities out of the box if it isn't properly hardened. This article breaks down the most common causes and walks through setting up RBAC, Pod Security, Network Policy, secret management, and runtime monitoring to effectively protect your production cluster.

Security

System File Integrity Monitoring with AIDE on Linux: Early Intrusion Detection and Data Tampering Prevention

By IT From Zero March 22, 2026

Ensuring Linux server security is a top priority, and File Integrity Monitoring (FIM) with AIDE is an effective solution. This article shares practical experience deploying AIDE for early intrusion detection and prevention of system data tampering.

Security

Hardening Linux Server: A Comprehensive Security Checklist for Beginners

By IT From Zero March 20, 2026

In the digital age, Linux server security is vital. This article offers a comprehensive hardening checklist covering essential steps – from system updates, SSH configuration, to firewalls and user management – helping you protect your server from all online threats.

Security

Installing and Configuring ModSecurity (WAF) on Nginx: Protecting Web Applications from A-Z

By IT From Zero March 19, 2026

ModSecurity (WAF) on Nginx is a powerful tool to protect web applications from common attacks. This article provides a detailed guide from basic installation to advanced fine-tuning, based on practical experience deploying in production environments, helping you set up a secure "shield" for your website.