Security – Page 7 – ITFROMZERO

Hardening SSH Server Security with ssh-audit: Eliminating Weak Algorithms for 2024

By admin May 12, 2026

Don't let your server be compromised by outdated SSH algorithms. This guide shows you how to use ssh-audit to scan vulnerabilities and secure your SSH Server in just 5 minutes.

Security

Preventing BadUSB on Linux with USBGuard: Don’t Let Physical Ports Be Your Achilles’ Heel

By admin May 11, 2026

Secure your Linux system against BadUSB using USBGuard. A detailed guide on setting up peripheral whitelists, creating security policies, and monitoring USB ports for SysAdmins.

Security

Hardening WordPress for SysAdmins: “Root-Level” Security from Web Server to Source Code

By admin May 9, 2026

Practical WordPress hardening experience for SysAdmins: blocking Nginx attacks, strict file system permissions, and secure wp-config.php tuning for production servers.

Security

Configuring HTTP Security Headers: ‘Armor’ for Nginx and Apache to Achieve A+ Standard

By admin May 9, 2026

Installing SSL (HTTPS) is just the beginning. To truly block Clickjacking and XSS, you need a powerful set of HTTP Security Headers. Upgrade your security in 5 minutes.

Security

Ditch VPNs, Use Cloudflare Access to Secure Internal Apps: Fast, Secure, and Effortless

By admin May 3, 2026

Forget VPNs! Learn how to use Cloudflare Access to protect internal dashboards and SSH with Google/GitHub SSO. 5-minute setup for enterprise-grade security.

Security

Trivy: The ‘Sentry’ for Ultra-Fast Docker and K8s Vulnerability Scanning for DevOps

By admin May 1, 2026

Don't leave your container systems vulnerable to hackers. A detailed guide on using Trivy for Docker and Kubernetes scanning, with automated CI/CD integration in minutes.

Security

Securing Secrets in GitHub Actions: Don’t Leak API Keys Due to a Moment of Negligence

By admin April 29, 2026

Don't expose API keys and tokens on GitHub. A detailed guide on using GitHub Actions Secrets to protect sensitive information and deploy CI/CD securely.

Security

Nginx GeoIP Blocking: How I Cut 80% of Junk Traffic from Unknown Countries

By admin April 27, 2026

Blocking IPs by country using Nginx and MaxMind GeoLite2 is the most effective way to eliminate 80% of botnet junk traffic. See this detailed configuration guide drawn from real-world experience.

Security

Configuring DNSSEC for Linux: Don’t Let Your Website Get Hijacked Even with SSL

By admin April 22, 2026

DNSSEC is a mandatory security layer to prevent DNS Spoofing. This article provides a detailed guide on configuring BIND9 on Linux, creating ZSK/KSK keys, and setting up the DS Record trust chain.

Security

Moving from iptables to nftables: Why It’s a Mandatory Step for SysAdmins

By admin April 22, 2026

Iptables is outdated and slow. Discover how nftables optimizes firewall performance, supports IPv4/IPv6 simultaneously, and how to safely migrate your Linux system.