Cybersecurity · Editorial desk
Auris Security Desk
The Security Desk writes for the IT and security teams who run Windows and Linux estates in Southeast Asia. It sits inside Auris, the appointed Southeast Asia distributor of SSHepherd®, whose engineers deploy and support it in the region.
- Exposed ports and remote access
- SSH, RDP, databases and file transfer
- Zero Trust and network access
- Malaysian cybersecurity regulation
An editorial team, not a single writer. How we write and check every article.
Articles
From the Security Desk.
- What is an air gap, and can software give the same isolation?An air gap means no physical connection and no automatic data path. Software can get close to that isolation but cannot match it. Here is the difference.
- How do you record and audit privileged SSH and RDP sessions?Logs tell you who connected; a recording shows what they did. How to audit privileged SSH and RDP sessions, what NIST expects, and where the gaps are.
- How do ransomware attackers get in through RDP?Ransomware crews reach RDP through exposed ports, stolen logins and weak VPNs. The attack chain, what CISA's advisories say, and how to break it.
- What is port knocking, and is it secure?Port knocking keeps a port closed until a secret sequence arrives. How it works, where it fails, and why single packet authorization replaced it.
- What is a bastion host, and is it still enough?A bastion host is a hardened server that is the one way into a private network. What it does well, where it falls short, and what to use instead.
- How do you secure an SFTP server that partners need to reach?How to secure an SFTP server partners must reach: jailed accounts, key-only login, a short allow-list, logging, and removing the open port where possible.
- What is lateral movement, and how do you stop it?Lateral movement is how an attacker turns one compromised machine into many. How it works, which controls actually limit it, and what to fix first.
- Should a database ever be reachable from the internet?A database should almost never accept connections from the internet. Why a password isn't enough, the few exceptions, and safer ways to give people access.
- Is fail2ban enough to protect SSH?Fail2ban slows password guessing on SSH, but it leaves the port open. What it does, where it stops, and what to add so SSH isn't your weak point.
- How do attackers find open ports on my servers?Attackers find open ports by scanning IP ranges and searching public scan databases. How it works, what a scan sees, and how to leave nothing to find.
- What is the difference between ZTNA and a VPN?A VPN puts you on the network; ZTNA connects you to one application after checking who you are. How they differ, where each fits, and what to ask vendors.
- Is it safe to expose RDP to the internet?Exposing Remote Desktop (port 3389) to the internet is not safe, even with a strong password. What the risks are and what to put in front of RDP instead.
- Does changing the SSH port improve security?Moving SSH off port 22 cuts bot noise but stops nothing determined. What it changes, what it doesn't, and what actually removes the exposure.