Security Archives - Page 6 of 18 - ITFROMZERO

Development tutorial - IT technology blog

Building 2FA with Node.js: Don’t Let Passwords Be Your Only Line of Defense

By IT From Zero September 3, 2026

Learn how to build a Two-Factor Authentication (2FA) system using the TOTP standard with Node.js. A detailed guide on using speakeasy and qrcode with real-world security tips.

Security

Library Vulnerability Scanning with OWASP Dependency-Check: Don’t Let It Backfire

By IT From Zero August 30, 2026

Don't let third-party libraries become your project's Achilles' heel. A detailed guide on using OWASP Dependency-Check for vulnerability scanning and CI/CD integration.

Ubuntu

Still Vulnerable After Updating Ubuntu? Use needrestart to Fix It Properly

By IT From Zero August 30, 2026

Is an APT update enough? Learn how to use needrestart to manage service restarts, keeping your Ubuntu server secure without unnecessary reboots.

Security

Installing Endlessh: How to Trap Attack Bots in an Infinite SSH Loop on Linux

By IT From Zero August 28, 2026

Learn how to install Endlessh to create an SSH Tarpit, a technique to trap attack bots in an infinite loop, protecting Linux servers and wasting attacker resources.

Docker

Docker BuildKit Secrets: Stop Leaking API Keys in Your Image Layers!

By IT From Zero August 28, 2026

Stop exposing API keys via Docker ARG or ENV. Learn how to use BuildKit Secrets to securely pass tokens without leaving traces in your Docker image layers.

MySQL

Protecting MySQL from Brute-force Attacks with Connection Control Plugin

By IT From Zero August 28, 2026

Protect MySQL from brute-force attacks using the Connection Control Plugin. A detailed guide on setting failed login thresholds and delay mechanisms for optimal security.

Security

Securing Kubernetes Network Policy: Stopping ‘Lateral Movement’ in the Cluster

By IT From Zero August 25, 2026

Don't leave your K8s cluster exposed to hackers. Learn how to configure Network Policies to isolate Pods, block lateral movement attacks, and effectively implement Zero Trust.