Alerts This Week
Warning Icon 1 1,229
Alerts This Week
Warning Icon 1 1,229

Stay Ahead With Linux Security HOWTOs

SELinux Hero Esm H350
How to Harden My FilesystemPrice Tag%201access control SELinux

SELinux troubleshooting is a necessary skill for any system administrator. When a service fails despite correct file permissions and ownership, the immediate instinct is often to disable SELinux to confirm if the security policy is the bottleneck. While turning off enforcement frequently "fixes" the immediate symptom, it hides the underlying configuration flaw—such as an incorrect context or a policy violation—that could leave your system exposed. This guide outlines a systematic approach to...
1 min read How to Harden My Filesystem
High System Load Hero Esm H350
How to Secure My NetworkPrice Tag%201incident response open-source

When a production server spikes at 99% CPU or the disk starts grinding, the knee-jerk reaction is usually to blame a bad code push or a runaway backup job. But if you’ve spent enough time in security incident response, you know that "performance issues" are often the first sign that you’re dealing with Linux malware. . If you don't have a systematic way to look past the performance graphs, you’re just guessing. Here is how you use Linux commands to peel back the layers when a system starts...
4 - 7 min read How to Secure My Network
Reduce Attack Surface Of Public Linux Servers Hero Esm H350
How to Secure My NetworkPrice Tag%201network security Linux administration

Open ports have a way of accumulating over time. A test environment gets deployed and never removed. An administrative interface is exposed for troubleshooting and left in place. A database that was supposed to listen internally ends up reachable from the internet. . Attackers look for these mistakes constantly. Redis, Elasticsearch, MongoDB, Jenkins, and similar services still show up on internet-facing systems where they were never meant to be exposed. Sometimes it's a temporary change that...
4 - 7 min read How to Secure My Network
How To Remove Malicious Cron Esm H350
How to Secure My NetworkPrice Tag%201security advisory intrusion detection

A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job that silently downloads payloads, restarts malware, or re-establishes attacker access every few minutes. This guide shows how to identify suspicious cron entries, preserve forensic evidence, remove unauthorized scheduled tasks, and verify that no additional persistence mechanisms remain. . What Should You Save Before Removing Cron Jobs...
5 - 9 min read How to Secure My Network
7.Locks HexConnections Esm H350
How to Secure My NetworkPrice Tag%201access control Linux administration

Most SSH hardening advice ends at the same recommendation: Disable password authentication and use SSH keys. . That's good advice. It removes entire classes of attacks, including password spraying, credential stuffing, and brute-force attempts against exposed servers. The problem is what happens next. Many administrators treat SSH keys as the finish line when they are really the beginning of the hardening process. Attackers rarely care whether they obtained access with a password or a private...
6 - 12 min read How to Secure My Network
Filter%20icon Refine HOWTOs
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Does sandboxing completely stop hackers?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/153-does-sandboxing-completely-stop-hackers?task=poll.vote&format=json
153
radio
0
[{"id":494,"title":"Isolation breeds ultimate system safety.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":495,"title":"Flawed configurations bypass all barriers.","votes":1,"type":"x","order":2,"pct":100,"resources":[]},{"id":496,"title":"Determined exploits always break out.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security HOWTOs

We found -4 articles for you...
166
32.Lock Code Circular Esm H240
Price Tag%201security practicesserver securityfail2ban

Enhance Linux Security Against Brute-Force Attacks Using Fail2ban

Reduce the chances of hackers gaining access to your Linux servers by installing and configuring Fail2ban. . SSH and FTP are two of the most exploited network protocols. Hackers utilize complex automated tools to guess your username and password and then break into your system. With good security practices in place, you can mitigate most of the security risks. And with Fail2ban, you can further reduce the risk of security breaches by being proactive in securing your Linux servers or PCs. Fail2ban is a powerful open-source security software that dynamically protects your servers or PCs from suspicious activities and brute-force attacks . It continuously scans your log files for login attempts, and in case of any, it blocks the source IP address by updating your firewall rules. Fail2ban works with most remote connection services such as SSH, FTP, SMTP, and HTTP. Fail2ban is easy to configure and customize. You can specify for how long you want to block the IP addresses or configure it to receive automated alerts when there is suspicious activity. To emphasize, Fail2ban alone is not enough to protect you from security breaches. You should also have other security measures in place to reduce the risk of being hacked. For example, you should always use strong passwords on your systems and restrict access as much as you can. . Defend your Linux system from brute-force intrusions by implementing Fail2ban, bolstering your server's protection against automated assaults.. Fail2ban, Linux Server Security, SSH Protection. . Brittany Day

Calendar%202 May 30, 2023 •User Avatar Brittany Day How to Learn Tips and Tricks
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Does sandboxing completely stop hackers?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/153-does-sandboxing-completely-stop-hackers?task=poll.vote&format=json
153
radio
0
[{"id":494,"title":"Isolation breeds ultimate system safety.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":495,"title":"Flawed configurations bypass all barriers.","votes":1,"type":"x","order":2,"pct":100,"resources":[]},{"id":496,"title":"Determined exploits always break out.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here