Security – Page 6 – ITFROMZERO

Preventing BadUSB on Linux with USBGuard: Don’t Let Physical Ports Be Your Achilles’ Heel

By admin May 11, 2026

Secure your Linux system against BadUSB using USBGuard. A detailed guide on setting up peripheral whitelists, creating security policies, and monitoring USB ports for SysAdmins.

Security

Hardening WordPress for SysAdmins: “Root-Level” Security from Web Server to Source Code

By admin May 9, 2026

Practical WordPress hardening experience for SysAdmins: blocking Nginx attacks, strict file system permissions, and secure wp-config.php tuning for production servers.

Security

Configuring HTTP Security Headers: ‘Armor’ for Nginx and Apache to Achieve A+ Standard

By admin May 9, 2026

Installing SSL (HTTPS) is just the beginning. To truly block Clickjacking and XSS, you need a powerful set of HTTP Security Headers. Upgrade your security in 5 minutes.

Security

Ditch VPNs, Use Cloudflare Access to Secure Internal Apps: Fast, Secure, and Effortless

By admin May 3, 2026

Forget VPNs! Learn how to use Cloudflare Access to protect internal dashboards and SSH with Google/GitHub SSO. 5-minute setup for enterprise-grade security.

Security

Trivy: The ‘Sentry’ for Ultra-Fast Docker and K8s Vulnerability Scanning for DevOps

By admin May 1, 2026

Don't leave your container systems vulnerable to hackers. A detailed guide on using Trivy for Docker and Kubernetes scanning, with automated CI/CD integration in minutes.

Security

Securing Secrets in GitHub Actions: Don’t Leak API Keys Due to a Moment of Negligence

By admin April 29, 2026

Don't expose API keys and tokens on GitHub. A detailed guide on using GitHub Actions Secrets to protect sensitive information and deploy CI/CD securely.

Security

Nginx GeoIP Blocking: How I Cut 80% of Junk Traffic from Unknown Countries

By admin April 27, 2026

Blocking IPs by country using Nginx and MaxMind GeoLite2 is the most effective way to eliminate 80% of botnet junk traffic. See this detailed configuration guide drawn from real-world experience.

Security

Configuring DNSSEC for Linux: Don’t Let Your Website Get Hijacked Even with SSL

By admin April 22, 2026

DNSSEC is a mandatory security layer to prevent DNS Spoofing. This article provides a detailed guide on configuring BIND9 on Linux, creating ZSK/KSK keys, and setting up the DS Record trust chain.

Security

Moving from iptables to nftables: Why It’s a Mandatory Step for SysAdmins

By admin April 22, 2026

Iptables is outdated and slow. Discover how nftables optimizes firewall performance, supports IPv4/IPv6 simultaneously, and how to safely migrate your Linux system.

Security

Turning Linux into a Database: Querying and Security Monitoring with osquery

By admin April 21, 2026

Stop struggling with Bash scripts. Learn how to use osquery to query the Linux operating system using SQL, making security monitoring and infrastructure management 10x more efficient.