This is my favorite way to secure a VPS in 2026.
Source: YouTube · Dreams of Code · published Jun 23, 2026 · 15:30
The video outlines a "scorched earth approach" to VPS security in response to rising supply chain attacks and cloud provider breaches, aiming to completely block public internet ingress while maintaining service availability 0:00.
Key Takeaways:
• The 2026 threat landscape is defined by continuous supply chain attacks and high-profile breaches of major cloud providers like GitHub and Vercel 0:02.
• VPS users deploying applications must shift to proactive security measures to protect their infrastructure from these evolving threats 0:17.
• The "scorched earth" method involves completely shutting down all inbound (ingress) traffic from the public internet to the VPS 0:30.
• Despite blocking public ingress, this approach still allows the owner to access private services and correctly serves web traffic to end users 0:39.
This strategy offers a robust way to isolate a VPS from direct public exposure, drastically reducing the attack surface without sacrificing functionality.
Sources:
- 0:00 Introduction to 2026 security threats and the scorched earth concept
- 0:02 Discussion of supply chain attacks and cloud provider breaches
- 0:17 Need for proactive security posture for VPS deployments
- 0:30 Explanation of turning off all public ingress to the VPS
- 0:39 Maintaining private service access and user web traffic
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
2026 is shaping up to be quite an interesting year, especially when it comes to security, or more accurately, when it comes to vulnerabilities. Not only have we seen a constant wave of supply chain attacks, but we're also seeing many cloud providers such as GitHub and Versel get breached as well. Because of this, it means that now is the perfect time to start taking proactive steps in improving one's security posture, especially if, like me, you happen to use a VPS when it comes to deploying your applications. For myself, that means applying a method that I like to refer to as the scorched earth approach, which is where I effectively turn off all ingress to the VPS from the public internet, but in a way that still allows me to access any private services and still serves web traffic to my …