Fortify Your
Infrastructure
Hands-on guides for security hardening, DevOps, and infrastructure management. No fluff — just commands you can run and patterns you can ship.
What We Cover
InfraFort focuses on the tools and practices that keep systems running and secure.
Security Hardening
Firewalls, VPNs, access control, and threat mitigation. Lock things down before someone else finds the door.
Server Administration
Linux, Windows, databases, and automation. The day-to-day commands and configs that keep production alive.
DevOps & Tooling
CI/CD, containers, orchestration, and the glue that ties infrastructure together at scale.
Latest Articles
View all 71 articles →HTTP2Shell CVE-2026-111497 Hits CISA KEV: Brotli RCE Spreads from Node.js to Python, .NET and Envoy
CISA added Brotli CVE-2026-111497 (HTTP2Shell) to KEV on Oct 27 with a Nov 10 deadline. It reaches Python, .NET, Bun, Envoy and Istio, not just Node.js. Patch, rebuild images, hunt vendored copies.
PHP2Shell CVE-2026-109618 and CVE-2026-109619: Unauthenticated RCE in PHP Core, Patch Every Web Server
PHP2Shell (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) gives unauthenticated RCE on mod_php and PHP-FPM. Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and hunt for web workers spawning shells.
Node.js CVE-2026-111497: Brotli Decoder Out-of-Bounds Write Opens RCE on 22.x, 24.x and 26.x
Node.js CVE-2026-111497 is a Brotli decoder out-of-bounds write that can lead to remote code execution. Upgrade to 22.23.4, 24.22.1 or 26.12.1 and rebuild SEAs and snapshots.
Latest Guides
View all 6 guides →Harden Docker on Ubuntu 24.04
Install Docker CE the right way on Ubuntu 24.04, lock down the daemon and socket, stop published ports from bypassing UFW, and run containers with the least privilege they actually need.
Multi-Stage Docker Builds with Scratch: Maximum Efficiency, Minimum Attack Surface
Why building a static Go binary in a multi-stage Dockerfile and shipping it on scratch produces one of the smallest, most secure container images possible — and how every line of the Dockerfile contributes.
Firewalld: Zones, Services & Advanced Rules
A comprehensive guide to firewalld covering zones, services, rich rules, IP management, Cloudflare whitelisting, and everything an administrator needs to lock down a server.