Alerts This Week
Warning Icon 1 460
Alerts This Week
Warning Icon 1 460

Stay Ahead With Linux Security HOWTOs

Reduce Attack Surface Of Public Linux Servers Hero Esm H350
How to Secure My NetworkPrice Tag%201network security Linux administration

Open ports have a way of accumulating over time. A test environment gets deployed and never removed. An administrative interface is exposed for troubleshooting and left in place. A database that was supposed to listen internally ends up reachable from the internet. . Attackers look for these mistakes constantly. Redis, Elasticsearch, MongoDB, Jenkins, and similar services still show up on internet-facing systems where they were never meant to be exposed. Sometimes it's a temporary change that...
1 min read How to Secure My Network
How To Remove Malicious Cron Esm H350
How to Secure My NetworkPrice Tag%201security advisory intrusion detection

A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job that silently downloads payloads, restarts malware, or re-establishes attacker access every few minutes. This guide shows how to identify suspicious cron entries, preserve forensic evidence, remove unauthorized scheduled tasks, and verify that no additional persistence mechanisms remain. . What Should You Save Before Removing Cron Jobs...
5 - 9 min read How to Secure My Network
7.Locks HexConnections Esm H350
How to Secure My NetworkPrice Tag%201access control Linux administration

Most SSH hardening advice ends at the same recommendation: Disable password authentication and use SSH keys. . That's good advice. It removes entire classes of attacks, including password spraying, credential stuffing, and brute-force attempts against exposed servers. The problem is what happens next. Many administrators treat SSH keys as the finish line when they are really the beginning of the hardening process. Attackers rarely care whether they obtained access with a password or a private...
6 - 12 min read How to Secure My Network
Detect Unauthorised Ssh Keys Hero Esm H350
How to Secure My NetworkPrice Tag%201security advisory remote access

Most of the time, nobody notices. SSH authentication succeeds, no alerts are generated, and the connection looks exactly the way it did the day the key was installed. That's part of the problem. . When security teams investigate unauthorized access on Linux systems, they often focus on passwords, exposed services, or vulnerable software. Trusted access receives less attention. Yet a single forgotten or unauthorized SSH key can provide the same access as a legitimate user while attracting very...
4 - 7 min read How to Secure My Network
IDS VS IPS Esm H350
How to Secure My NetworkPrice Tag%201intrusion detection application security

The wrong IPS rule can look like a security fix right up until it becomes an outage. . On Linux systems, detection and prevention are often discussed together, but they do not carry the same operational risk. One tells admins that something suspicious happened. The other can decide whether traffic is allowed to continue. That is why IDS vs IPS is not just a definition to memorize. It is a deployment decision about where to monitor, where to block, and how much confidence a team needs before...
4 - 8 min read How to Secure My Network
Filter%20icon Refine HOWTOs
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is automated patching safe for servers?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/152-is-automated-patching-safe-for-servers?task=poll.vote&format=json
152
radio
0
[{"id":491,"title":"No: Bad updates break production","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":492,"title":"Yes: unpatched flase are worse","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":493,"title":"Only with AI-driven testing rollback","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security HOWTOs

We found -4 articles for you...
166
32.Lock Code Circular Esm H240
Price Tag%201Linux administrationservice managementsystemctl

Enhance Governance of Masked Services within Linux Operating Environments

Here's everything you need to know about masked services in Linux. . Have you ever gone to start or stop a service in Linux using the systemctl command only to see a warning such as: Failed to start postgresql.service: Unit postgresql.service is masked You know you installed the Postgresql database server and it was working properly, yet somehow you no longer have control over the service. You can’t manage it in any way. What happened? First of all, masks are a different way of disabling a service. Here’s the difference: When you disable a service with sudo systemctl disable , all symlinks for the service are removed. When masking a service, the symlinks are moved and then point to /dev/null. When you simply disable a service, it can still be started manually. When you mask a service, it cannot be started manually. In other words, masking a service renders the service permanently unusable until it’s unmasked. . Grasping hidden services in Unix aids in sustaining efficient service oversight utilizing systemctl commands and implementations.. masked Services, service management, Linux administration. . Brittany Day

Calendar%202 Jul 22, 2022 •User Avatar Brittany Day How to Learn Tips and Tricks
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is automated patching safe for servers?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/152-is-automated-patching-safe-for-servers?task=poll.vote&format=json
152
radio
0
[{"id":491,"title":"No: Bad updates break production","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":492,"title":"Yes: unpatched flase are worse","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":493,"title":"Only with AI-driven testing rollback","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here