Blog - Security

Linux Patch Management for Ubuntu and Oracle Linux: A Regulated-Fleet Checklist

Linux Patch Management for Ubuntu and Oracle Linux: A Regulated-Fleet Checklist

Oct 21, 2026    Mariusz Antonik    Security    10 min read

Managing patches across Ubuntu and Oracle Linux is less about finding one tool with every logo and more about proving a controlled, repeatable outcome. This checklist shows how to evaluate commercial platforms and a mirror-plus-automation approach against staged rollout, CVE evidence, rollback, support, and audit requirements. It also explains how Linux server monitoring can verify that patched systems remain healthy after each maintenance window.

Read More
Linux AD Machine Password Rotation: A Safe Cleanup Checklist

Linux AD Machine Password Rotation: A Safe Cleanup Checklist

Oct 17, 2026    Mariusz Antonik    Security    8 min read

A Linux computer account can show PasswordNeverExpires in Active Directory even while SSSD is successfully rotating its machine password. This checklist explains how to separate an AD attribute finding from actual keytab health, trace why the flag is still being set, and clear it safely at scale. It also shows which evidence belongs in practical Linux server monitoring so the same drift does not return unnoticed.

Read More
SSH Brute-Force Protection Checklist for Practical Linux Server Monitoring

SSH Brute-Force Protection Checklist for Practical Linux Server Monitoring

Oct 05, 2026    Mariusz Antonik    Security    6 min read

SSH brute-force protection helps when it is part of a wider Linux server monitoring and hardening plan. This checklist covers thresholds, firewall rule safety, persistence, notifications, lockout risks, and weekly security reporting. It gives developers and small business owners a practical way to reduce noisy attacks without turning access automation into a new production risk.

Read More
Investigating Unexpected Outbound Connections on Linux Servers

Investigating Unexpected Outbound Connections on Linux Servers

Aug 23, 2026    Mariusz Antonik    Security    6 min read

Unexpected outbound connections on a Linux server deserve careful investigation, but they do not always mean compromise. This checklist shows how to map a connection to a process, verify the destination, correlate the timing with deployments and scheduled jobs, and choose a safe response. Use it to make linux server monitoring more practical for developers and small business owners who need calm, evidence-based triage.

Read More
Linux Server Hardening Checklist with Monitoring for Small Teams

Linux Server Hardening Checklist with Monitoring for Small Teams

Aug 13, 2026    Mariusz Antonik    Security    6 min read

A Linux hardening guide is most useful when it turns into repeatable checks, not a one-time setup sprint. This checklist connects SSH, patching, firewall rules, backups, certificates, and linux server monitoring into a practical routine for small teams. Use it to reduce exposure, catch drift, and keep production servers safer without building a heavyweight security program.

Read More
Daily Linux Server Security Audit Checklist for Small Teams

Daily Linux Server Security Audit Checklist for Small Teams

Aug 11, 2026    Mariusz Antonik    Security    6 min read

A daily Linux server security audit helps small teams catch exposed ports, missing patches, weak access paths, and suspicious drift before they become emergencies. This checklist shows what to automate, what to review manually, and how to combine quick external scans with practical linux server monitoring. Use it to build a lightweight routine that improves security without creating another dashboard to babysit.

Read More
Linux Server Hardening Checklist for Small Business Teams

Linux Server Hardening Checklist for Small Business Teams

Aug 09, 2026    Mariusz Antonik    Security    6 min read

Linux server hardening works best when security controls and monitoring are planned together. This checklist helps developers, homelab operators, and small business owners lock down SSH, patching, accounts, firewalls, backups, and service exposure without losing operational visibility. Use it as a practical baseline before a server becomes production-critical.

Read More
Linux Server Monitoring Checklist for High-Risk CVE Advisories

Linux Server Monitoring Checklist for High-Risk CVE Advisories

Aug 07, 2026    Mariusz Antonik    Security    7 min read

When a high-risk Linux advisory appears before a fixed package is available, small teams need a calm way to reduce exposure without making rushed changes. This checklist shows developers and small business owners how to use linux server monitoring, inventory checks, log review, and change planning while waiting for vendor patches. Use it for SSRF, local file read, package, and service advisories where the right response is visibility first, then controlled remediation.

Read More
Plesk XML API Privilege Escalation: A Small-Business Server Monitoring Checklist

Plesk XML API Privilege Escalation: A Small-Business Server Monitoring Checklist

Aug 01, 2026    Mariusz Antonik    Security    7 min read

A high-severity control panel vulnerability should trigger more than a rushed patch window; it should trigger a calm verification checklist. For small teams running Plesk on Linux, the safest response is to confirm exposure, patch level, account access, file integrity, and post-remediation evidence in a repeatable order. This linux server monitoring checklist helps developers and business owners turn a scary advisory into practical actions without losing track of the fundamentals.

Read More
Wazuh Agent Enrolled but Missing from Dashboard: A Practical Checklist

Wazuh Agent Enrolled but Missing from Dashboard: A Practical Checklist

Jul 30, 2026    Mariusz Antonik    Security    7 min read

When a Wazuh agent says it is enrolled and connected but the dashboard still shows nothing, the problem is often in the gap between transport, identity, and indexed data. A calm checklist keeps teams from reinstalling agents blindly or weakening security controls just to make a host appear. Use this practical linux server monitoring workflow to verify the manager, agent identity, log flow, indexer health, and reporting expectations in the right order.

Read More