The Auris blog
Straight answers.Security, AI and cloud cost.
The questions IT and finance teams actually ask, answered in the first paragraph and sourced.
- CybersecurityWhat is an air gap, and can software give the same isolation?An air gap means no physical connection and no automatic data path. Software can get close to that isolation but cannot match it. Here is the difference.
- CybersecurityHow do you record and audit privileged SSH and RDP sessions?Logs tell you who connected; a recording shows what they did. How to audit privileged SSH and RDP sessions, what NIST expects, and where the gaps are.
- FinOpsHow often should you review cloud costs?Review cloud costs in layers: alerts daily, a short team check weekly, a finance close monthly. Why a monthly-only review is too late.
- CybersecurityHow do ransomware attackers get in through RDP?Ransomware crews reach RDP through exposed ports, stolen logins and weak VPNs. The attack chain, what CISA's advisories say, and how to break it.
- FinOpsWhat is rightsizing in cloud computing?Rightsizing means matching cloud resources to what workloads actually use. How AWS and Azure find oversized instances, and what to check before you resize.
- CybersecurityWhat is port knocking, and is it secure?Port knocking keeps a port closed until a secret sequence arrives. How it works, where it fails, and why single packet authorization replaced it.
- CybersecurityWhat is a bastion host, and is it still enough?A bastion host is a hardened server that is the one way into a private network. What it does well, where it falls short, and what to use instead.
- FinOpsShowback or chargeback: how should you allocate cloud costs?Showback reports cloud costs to teams; chargeback bills them in the books. What the FinOps Foundation says, how to choose, and why tags decide both.
- CybersecurityHow do you secure an SFTP server that partners need to reach?How to secure an SFTP server partners must reach: jailed accounts, key-only login, a short allow-list, logging, and removing the open port where possible.
- FinOpsReserved Instances or Savings Plans: which should you buy?For most AWS compute, buy Savings Plans: AWS itself recommends them over Reserved Instances. Here is when each one fits, and what to do before you commit.
- CybersecurityWhat is lateral movement, and how do you stop it?Lateral movement is how an attacker turns one compromised machine into many. How it works, which controls actually limit it, and what to fix first.
- CybersecurityShould a database ever be reachable from the internet?A database should almost never accept connections from the internet. Why a password isn't enough, the few exceptions, and safer ways to give people access.
- FinOpsHow do you cut an AWS bill without hurting performance?Cut an AWS bill safely: stop paying for idle capacity, rightsize with measured data, then commit with Savings Plans. The order matters more than the tools.
- CybersecurityIs fail2ban enough to protect SSH?Fail2ban slows password guessing on SSH, but it leaves the port open. What it does, where it stops, and what to add so SSH isn't your weak point.
- FinOpsWhat is FinOps?FinOps is a practice that gets engineering, finance and business teams to manage cloud spend together. What it is, its three phases, and what it is not.
- CybersecurityHow do attackers find open ports on my servers?Attackers find open ports by scanning IP ranges and searching public scan databases. How it works, what a scan sees, and how to leave nothing to find.
- CybersecurityWhat is the difference between ZTNA and a VPN?A VPN puts you on the network; ZTNA connects you to one application after checking who you are. How they differ, where each fits, and what to ask vendors.
- CybersecurityIs it safe to expose RDP to the internet?Exposing Remote Desktop (port 3389) to the internet is not safe, even with a strong password. What the risks are and what to put in front of RDP instead.
- CybersecurityDoes changing the SSH port improve security?Moving SSH off port 22 cuts bot noise but stops nothing determined. What it changes, what it doesn't, and what actually removes the exposure.