🔒

Security & Hardening

Server security, SSL/TLS, firewall configuration, and best practices

37 tutorials

An open network-rack door and a face-down printout on a metal cart, cool white light, no vendor logos and no readable text.

CVE-2026-85102 Is in the Wild. LivePatch 28 Won't Save You

CISA's Sept. 25 due date for CVE-2026-85102 and CVE-2026-93616 has passed. The jumbo that closes the VPN bug does not close the management bug.

September 29, 2026 ⏱️ 40 minutes

Check PointCVE-2026-85102CVE-2026-93616

Laptop on a server-room cart showing a terminal window with no readable text, cool white lighting, no vendor logos.

🔒 security Intermediate

Exposed Vite Dev Servers Are Being Mined for AWS Keys

F5 tracked a month of scans against internet-facing Vite. CVE-2026-39364 bypasses file reads. Patch, close 5173, and rotate anything that lived in .env.

September 21, 2026 ⏱️ 25 minutes

ViteCVE-2026-39364AWS

Server room aisle with a laptop showing a kernel version string, cool fluorescent light, no logos or readable hostnames.

🔒 security Intermediate

ZcopyReaper Is in RDS Zerocopy. User Namespaces Will Not Save You

CVE-2026-43502 is a local root in the RDS zerocopy path, present since Linux 4.17. Mainline fix is 7.1-rc3. Ubuntu lists 7.0.0-28, 6.8.0-136, and 5.15.0-186. Restricting user namespaces does nothing.

September 18, 2026 ⏱️ 25 minutes

CVE-2026-43502ZcopyReaperLinux kernel

Network rack with an F5-style appliance silhouette and a laptop showing a terminal, cool aisle lighting, no logos.

🔒 security Advanced

F5 BIG-IP APM Grew a Fileless Rootkit. Hashes Will Not Save You

Sophos and ESET describe PoisonedRefresh: a Linux implant that serves a PHP web shell from memory on BIG-IP APM webtop files. Disk looks clean. Check mmap, a pipe, and HTTP 201 pretending to be CSS.

September 14, 2026 ⏱️ 40 minutes

F5BIG-IProotkit

Linux workstation with a terminal and a closed laptop, cable lock on the desk, overhead office light, no neon.

🔒 security Intermediate

Google Says Attackers Are Going After AI Coding Tools

GTIG maps token theft from GitHub Actions runners and junk in hidden AI workspaces. What to change on Linux CI and laptops this week.

September 10, 2026 ⏱️ 30 minutes

GitHub Actionssupply chainAI coding

A server rack with a media streaming interface and a warning shield icon on a console screen

🔒 security Intermediate

Plex Urges Update to 1.43.3: 300,000 Servers Are Exposed

Plex patched multiple security flaws with 1.43.3, but thousands of servers are still reachable online. Here's how to update on Docker, NAS, and Linux.

September 5, 2026 ⏱️ 15 minutes

Plex Media Serversecurity patchLinux server

Locked server-room door with a laptop showing an SSH terminal session

🔒 security Intermediate

SSH Hardening with Fail2Ban: A Complete Guide to Blocking Brute Force Attacks

Stop SSH brute force attacks cold. This guide covers key-based auth, fail2ban configuration, firewall rules, and advanced hardening for production Linux servers.

August 30, 2026 ⏱️ 25 minutes

SSHfail2banLinux security

Terminal showing LUKS encryption setup commands on a Linux server

🔒 security Intermediate

Linux LUKS Disk Encryption: A Complete Guide for Servers and Workstations

Encrypt your data at rest with LUKS on Linux. This guide covers setup, key management, automated unlocking, and performance tuning for production systems.

August 25, 2026 ⏱️ 45 minutes

LUKSdisk encryptionLinux security

Terminal screen showing KVM vulnerability warning with red alert text on dark background

🔒 security Intermediate

Zapscape (CVE-2026-64561): The KVM Vulnerability That Lets Attackers Escape Your VM

A critical KVM vulnerability allows attackers to break out of virtual machines and take control of the host. Here's what it is, who's affected, and how to fix it.

August 22, 2026 ⏱️ 20 minutes

KVMCVE-2026-64561Zapscape

Network closet with ethernet patch panel, labeled cables, and a small firewall appliance

🔒 security Intermediate

How to Set Up nftables as Your Linux Firewall in 2026

nftables is replacing iptables as the standard Linux firewall. Here's how to install, configure, and migrate to nftables on modern Linux servers.

August 17, 2026 ⏱️ 25 minutes

nftablesfirewallLinux

Engineer marking failed code diffs with a red pen beside a laptop showing failing tests

🔒 security Intermediate

Why AI-Generated Security Patches Fail 74% of the Time (And What to Do Instead)

A new study of 6,000+ patches reveals AI models can't reliably fix security vulnerabilities. Here's what server administrators and DevOps engineers need to know.

Security & Hardening

CVE-2026-85102 Is in the Wild. LivePatch 28 Won't Save You

Exposed Vite Dev Servers Are Being Mined for AWS Keys

ZcopyReaper Is in RDS Zerocopy. User Namespaces Will Not Save You

F5 BIG-IP APM Grew a Fileless Rootkit. Hashes Will Not Save You

Google Says Attackers Are Going After AI Coding Tools

Plex Urges Update to 1.43.3: 300,000 Servers Are Exposed

SSH Hardening with Fail2Ban: A Complete Guide to Blocking Brute Force Attacks

Linux LUKS Disk Encryption: A Complete Guide for Servers and Workstations

Zapscape (CVE-2026-64561): The KVM Vulnerability That Lets Attackers Escape Your VM

How to Set Up nftables as Your Linux Firewall in 2026

Why AI-Generated Security Patches Fail 74% of the Time (And What to Do Instead)

Linux Copy Fail Vulnerability: CVE-2026-31431 Explained and How to Patch

Docker Security Hardening: 9 Steps to Lock Down Production Containers

July 2026 Patch Emergency: 570 Microsoft Flaws, Fortinet Zero-Days, and SonicWall Exploits Hit at Once

Microsoft's July 2026 Patch Tuesday: 570 Flaws, 3 Zero-Days, and Why Your Patching Window Just Shrunk

GhostLock CVE-2026-43499: 15-Year-Old Linux Root Exploit

SSH Hardening and Fail2Ban: The Complete Guide to Locking Down Your Linux Server

Januscape: 16-Year-Old Linux KVM Flaw Allows VM Escape on Intel and AMD Systems

DirtyClone (CVE-2026-43503): What Linux Admins Need to Know and How to Mitigate Right Now

PinTheft CVE-2026-43494: Linux Kernel Privilege Escalation — What Server Admins Must Know

Arch Linux AUR Hit by Massive Supply Chain Attack — Over 400 Packages Compromised

OpenSSL CVE-2026-45447: Critical PKCS#7 Vulnerability and Server Patch Guide

File Integrity Monitoring with AIDE: Detect Unauthorized Changes on Linux Servers

Automated Linux Security Auditing with Lynis: Full System Scan and Remediation

OpenVPN vs WireGuard: Choosing the Right VPN Server for Your Infrastructure

SSH Certificate-Based Authentication: Moving Beyond Key Pairs for Enterprise Scale

Advanced Fail2ban Configuration: Custom Jails, Filters, and Actions

Linux Auditd Monitoring: Track Every System Call for Security Compliance

SELinux vs AppArmor: Choosing the Right Linux Security Module in 2026

Nginx 1.29.5 Security Update: Critical Patches and Upgrade Guide

Server Security Hardening Checklist 2026: Complete Guide for Linux Systems

Docker Security Best Practices: Protecting Containerized Applications

Securing Websites with Let's Encrypt SSL Certificates

Linux Security Hardening: Essential Practices for Production Servers

SSH Key-Based Authentication for Secure Server Access

SSH Server Hardening: Securing Remote Server Access

UFW Firewall Configuration: Securing Linux Servers