Hardened Bastion on Debian 13: Extreme Hardening with KSPP, Seccomp-BPF and SIEM Telemetry
Most Linux distributions follow a default-permit model: everything is allowed until the administrator restricts it. This post inverts that m
Linux & Systems (268 articles)
Fragnesia (CVE-2026-46300): LPE on Linux via ESP-in-TCP and page cache
What is Fragnesia (CVE-2026-46300)
CVE-2026-46333 ssh-keysign-pwn: Unprivileged SSH and /etc/shadow key theft
What is ssh-keysign-pwn (CVE-2026-46333)
CVE-2026-43284 + CVE-2026-43500 Dirty Frag: privilege escalation via page cache on Linux
What is Dirty Frag (CVE-2026-43284 + CVE-2026-43500)
CVE-2026-31431 Copy Fail: Privilege escalation in Linux since 2017
What is Copy Fail (CVE-2026-31431)
Implementing a Security Bastion with Kernel Hardening (Grsecurity/Self-Protection) and Memory Encryption on Linux
1. Introduction: The Kernel Attack Surface
OpenCode Enterprise: Implementation for Platform Engineering
1. Introduction to OpenCode
Guide to protect your Pendrive in Linux: LUKS + VeraCrypt + Automation
USB devices are extremely convenient, but they are also very easy to lose. If your data is not encrypted, anyone could access it.
Access to Single User Mode in Rocky Linux / AlmaLinux
1. Introduction
