Security Archives - ITFROMZERO - Share tobe shared!

Installing ModSecurity + OWASP CRS on Nginx: Building an Open-Source WAF for Comprehensive Website Protection

By IT From Zero November 8, 2026

A step-by-step guide to installing ModSecurity with the OWASP Core Rule Set on Nginx to build an open-source Web Application Firewall. Effectively block SQL injection, XSS, and path traversal at zero cost, with practical guidance on handling false positives.

Security

Guide to Encrypting Disk Partitions with LUKS and Configuring Automatic Network Unlock Using Clevis and Tang on Linux

By IT From Zero November 7, 2026

Avoid late-night server reboot hangs at the LUKS passphrase prompt. A complete guide to setting up Network-Bound Disk Encryption (NBDE) with Clevis and Tang on Linux for secure, automatic unlocks over the local network.

Security

How to Install and Use MISP on Linux: Managing and Sharing Threat Intelligence

By IT From Zero November 7, 2026

A comprehensive guide to deploying MISP on Linux using Docker to centralize Threat Intelligence. Configure automated feeds, flag IoCs for IDS, and build Python scripts for defensive integration.

Linux

How to Install and Use AIDE on Linux for File Integrity Monitoring

By IT From Zero November 6, 2026

A complete guide to configuring AIDE on Linux for early malware detection and file integrity auditing. Learn rule optimization and automated sysadmin alerting.

Linux

How to Set Up Two-Factor Authentication (2FA/MFA) for SSH on Linux with Google Authenticator

By IT From Zero November 6, 2026

A step-by-step guide to setting up two-factor authentication (2FA/MFA) for SSH on Linux using Google Authenticator with SSH keys, hardening servers against private key leaks.

Linux

Protecting Sensitive Data on Linux with LUKS and cryptsetup: A Configuration Guide from Laptop to Server

By IT From Zero November 5, 2026

Linux user account passwords are completely useless when someone physically removes your drive. Learn how to encrypt partitions with LUKS and cryptsetup to safeguard sensitive data on laptops and servers.

Security

Linux Kernel Hardening Guide: Using Sysctl to Mitigate SYN Flood and DoS Attacks

By IT From Zero November 4, 2026

Default Linux servers are highly vulnerable to SYN floods and DoS attacks due to unoptimized kernel settings. Learn how to harden the network stack with sysctl to withstand malicious traffic.

Docker

Generating and Managing Docker Image SBOMs with Syft and Grype: Securing Your Container Supply Chain

By IT From Zero October 29, 2026

A practical guide to generating Docker image SBOMs using Syft, scanning CVEs with Grype, and enforcing security quality gates in GitHub Actions CI/CD.

Python

A Guide to Bandit: Python Security Scanning (SAST) and CI/CD Integration

By IT From Zero October 28, 2026

A guide to using Bandit for Python static application security testing (SAST). Learn how to detect common flaws and configure a GitHub Actions pipeline to block vulnerabilities.

Fedora

How to Install and Configure CrowdSec on Fedora Server with firewalld Integration

By IT From Zero October 27, 2026

A detailed guide on installing CrowdSec and the firewalld bouncer on Fedora Server. Automatically detect and block SSH brute-force attacks and web exploits using crowd-sourced threat intelligence.