Samsung Galaxy Z Fold 8 Review: The Most Fun Phone in Ages
Samsung’s Galaxy Z Fold 8 is the best phone (not just foldable) I’ve ever used for consuming content—watching videos, playing mobile games, reading, and yes, even doomscrolling social media—thanks to its 7.6-inch inner screen.
The book-style foldable phone’s novel shape when closed may look strange at first, but I promise you that its shorter and wider footprint (when closed) quickly feels normal after a few days. The whole point of this form factor is to unfold it for its larger tablet-sized screen, and I can assure you that you’ll be doing that often because the experience encourages it more.
More importantly, the Z Fold 8 has fewer of the compromises that held back Samsung’s previous foldable phones. The device is lighter and easier to unfold, the battery is bigger and lasts all day, and Samsung has greatly reduced the crease on the inner screen.
Some apps still might not display correctly on both screens, but even so, I’m declaring the Z Fold 8 a home run. I can’t stop using it.
Samsung Galaxy Z Fold 8
The Galaxy Z Fold 8 is Samsung’s best version of a book-style foldable phone yet, even with its premium price.
The best size comparisons for the Z Fold 8 are a passport or a B7-sized notebook. The foldable measures 4.88 x 3.24 inches when it’s closed. It’s a few hairs thicker than the Z Fold 8 Ultra, but because of the squatter dimensions and lighter weight, the Z Fold 8 doesn’t feel unwieldy. I’m mostly able to reach corner to corner on the 5.5-inch AMOLED cover screen, something I haven’t been able to do on any “regular” (read: 6 to 6.9-inch) bar-style phone in years.
It also fits in my front pants pockets better than expected; I had concerns that the width might be too wide. I guess if you’re already used to the width of an iPhone 17 Pro Max or a Galaxy S26 Ultra, the Z Fold 8’s only slightly wider.
I’m able to reach the power button/fingerprint reader easily with my right thumb. Lefties might struggle since they can’t use their thumb and will have to register their index finger, which might be a little stretch to press the button, like it is for me. The volume rocker is a little high for me; I prefer its lower position on the Z Fold 7/Z Fold 8 Ultra. Typing with two hands on the cover screen is a much easier affair than on narrower phones; I made fewer typos compared to my iPhone. One-handed typing will depend on whether your hand is large enough and your thumb can stretch across the keyboard.
The 10:16 aspect ratio of the cover screen is also not as cramped as it seems. You lose vertical space compared to most regular phones and taller foldables like the Z Fold 8 Ultra, which means apps will show less and you’ll need to scroll more, but that’s mostly a non-issue if you open the phone and rotate it to vertical orientation. I never found myself bothered that I couldn’t see enough on the cover screen. If anything, I appreciated the shorter screen more because I didn’t feel compelled to pull it out as much unless I wanted to unfold it.
Like on the Z Fold 8 Ultra, you can use the Z Fold 8 in “tent” mode. This is great for propping up the device on a plane tray table or if you’re just too lazy to hold it up while in bed. I fly a lot for work, so tent mode is something I find very useful. A Z Fold 8 Ultra feature that you won’t find on the Z Fold 8 is “Flex mode.” On the Z Fold 8 Ultra, you can snap the screen so that it resembles a baby laptop, and some apps, like YouTube, will display the video above the crease and controls below it. I never found much utility for Flex mode on the previous Z Folds and I don’t miss it on the Z Fold 8. If that’s something you care about, get the Z Fold 8 Ultra instead.
Out of all the book-style foldable phones I’ve tested over the past seven years, the Z Fold 8 is the only one that I have unfolded more times than I have not. With each generation of Z Fold, Samsung made the dimensions more like a regular bar-style phone. I heaped praise on the Z Fold 7 for finally ditching the previous skinny, remote-like shape. And even though I considered the Z Fold 7 my favorite Android phone of 2025, I realized that I only used its inner screen maybe less than 50% of the time I pulled it out. With the cover screen being normal-sized, there just wasn’t as much of a need to unfold it for the 8-inch screen.
That hasn’t been the case with the Z Fold 8. Because of the shorter cover screen, I almost always unfold it to use the larger display. Maybe that’s because the Flex Titanium technology helps the hinge spring open better or the beveled aluminum frame makes it easier to unfold without needing fingernails, or both. Whatever the reasons are, it’s easier to see and feel the benefits of the larger size of the inner screen’s 4:3 aspect ratio for most content than on a more square-ish folding screen like the Z Fold 8 Ultra’s. To get roughly the same diagonal screen for widescreen videos on the Z Fold 8 Ultra, you need to rotate it, which is an extra step. It’s a tiny bit of friction that makes the task of quickly unfolding and getting more screen real estate less convenient. When you’re unfolding the phone dozens of times a day, that one extra step adds up.
After two weeks of using the Z Fold 8 and Z Fold 8 Ultra, I’ve concluded that if you watch more videos and game more than you read, the Z Fold 8 is the better foldable since you won’t need to rotate it so much. If you do more reading and split-screen multitasking, the Z Fold 8 Ultra is more suitable since you’ll get more vertical display on both the cover and inner screens without rotating, and you’ll do less scrolling.
I consume a ridiculous amount of content on a daily basis, so I find the 4:3 aspect ratio more versatile for my needs. In just two weeks, I watched, gamed, and read more on the Z Fold 8 than I have on any new phone I’ve ever tested. Videos look incredible on the 7.6-inch inner screen; 16:9 videos have minimal letterboxing (black bars) above and below them, and old content like many original anime series in 4:3 aspect ratio fill up the entire screen. I’ve never felt more informed and entertained from my phone.
As with the Z Fold 8 Ultra, the Z Fold 8 lets you run three apps in split-screen layouts or four (with a pop-up) on the inner screen. I wouldn’t recommend running more than two apps side by side in landscape orientation. Three apps side by side make each app window very skinny, and one app on one side and two stacked on the other half feel squished. Split-screen apps in vertical orientation just look too long to be useful in most cases. In some split-screen layouts, Samsung’s One UI 9 does let you tap between split-screen apps to have it fill more or most of the screen, but it’s not a function that’s easy to discover.
Performance from the Qualcomm Snapdragon 8 Elite Gen 5 for Galaxy chip is snappy and the 12GB of RAM on my 256GB review unit (you’ll get 16GB if you buy the 1TB model) never chugged when I threw Gemini and Galaxy AI tasks at it. The only thing that occasionally bugs me is that the Z Fold 8 gets toasty even when I’m not doing anything power-hungry. I suspect the super-thin design doesn’t leave much room for adequate thermals; there’s no vapor chamber for cooling like there is on the Galaxy S26 Ultra and iPhone 17 Pro.
The inner screen has been a joy to use, especially on my 1-hour subway commute to and from work. And instead of reaching for my iPad mini in bed, the Z Fold 8 now fills the role instead. It’s great only having to charge one device.
On the topic of charging, the Z Fold 8’s battery is rock solid, lasting me a full day even with heavy use of the inner screen. That’s not surprising since Samsung added a small percentage of silicon carbon into the 4,800mAh battery, which allows for the larger cell while maintaining a slim size. The 45W fast wired charging, with a compatible charger sold separately (of course), was more than quick enough to give me a recharge (around 0% to 65% in 30 minutes) whenever I was low on power. The Z Fold 8 also supports fast wireless charging at 20W, but I used it less compared to other phones like the iPhone 17 Pro or Pixel 10 Pro because Samsung still refuses to include built-in magnetic charging rings. You, again, need to buy a case with magnets to align the phone effortlessly with a Qi2 charger.
The only blemish, literally, on the larger screen experience is the 10-megapixel hole-punch camera on the inner screen. It can obscure essential parts of a menu, buttons, or text depending on what you’re looking at. For example, in Asphalt Legends, I couldn’t see a menu button that the hole punch covered. The hole punch is most noticeable when reading long blocks of text or black and white manga. It makes more sense to put the camera in the corner since it can’t fit in a bezel like on a regular tablet.
Other than that, I might nitpick the placement of the two stereo speakers. They’re located on the top and bottom of the cover screen, which makes them left-side oriented when the Z Fold 8 is unfolded. The speakers get loud enough, but because they’re both on the left in tablet mode, it almost sounds mono coming from one side. To be clear, these are stereo speakers. I get why Samsung might have designed it like this: the speakers fire out of the left and right in tent mode. Maybe put one speaker on each side for a balanced sound when it’s unfolded?
As for the crease… It’s less visible for sure, but hasn’t been completely eliminated. Fresh out of the box, the inner screen is pristine and crease-free. Two weeks in, the crease has deepened with hundreds of folds and I can see it when the screen is off, but it doesn’t warp as much as it did on past Samsung foldables. I almost never notice it when I’m watching videos, gaming, or reading. Besides the reinforced titanium alloy film on top of the screen and the titanium plate underneath it to ensure it stays flatter to the touch over time, Samsung also added an anti-reflective layer to reduce glare, and it really does help. I’ve said it before and I’ll say it again: the crease may never be fully eliminated from folding screens. The best we can hope for may just be making it less visible.
Depending on what you consider the Z Fold 8, either as the sequel to the Z Fold 7 or as a new class of foldables, the cameras will impress or disappoint. If viewed as a Z Fold 7 successor, the 50-megapixel main camera may feel like a downgrade from the previous 200-megapixel shooter. The 50-megapixel ultrawide on the Z Fold 8 will, however, be an upgrade from the Z Fold 7’s 12-megapixel one. You may also be upset it doesn’t have a telephoto lens.
If you want triple rear cameras and more resolution for the main camera, Samsung sells the Z Fold 8 Ultra. I have no complaints with the dual 50-megapixel rear cameras and dual 10-megapixel hole-punch cameras on the Z Fold 8. I don’t think most people will care there’s no telephoto. You still get a 2x zoom that crops in on the 50-megapixel sensor and looks nearly optical-quality to me. This is similar to the virtual 2x “telephoto” that you’ll find on other phones and all recent iPhones that have larger main sensors. The 4x and 10x zooms on the Z Fold 8 are digital, though, and the fuzzier image quality shows.
For everyday photos and videos, the Z Fold 8 cameras are good enough. Image quality looks vibrant and not overly saturated like it used to on Samsung phones and I think the HDR looks less processed compared to iPhone photos. Low-light shots look solid, too. If you’re the type of person who doesn’t want to spend too much or any time editing your photos, the Z Fold 8 photos are more than fine to post directly to social media.
The Z Fold 8 is loaded with a bunch of AI editing features, like “Photo Assist,” which lets you describe an edit with text; “My FanCam,” which lets you motion-track a subject in a video and then crop it for different aspect ratios for posting to social media; and a “Scan” feature that can clean up photos of documents (i.e. sharpen text, flatten and fix the geometry, and remove folded corners or fingers). These can be useful, but there already are apps that exist that do these things. I suppose it’s nice they’re free and built-in.
I also don’t hate any of the new video recording features, like the dual recording mode that lets you record from both the front and rear cameras simultaneously in various layouts (side by side, split top and bottom, and picture in picture) and super steady recording with horizon lock, which keeps the horizon line straight. Again, none are particularly special, but it’s nice that they’re there when you might need them.
It didn’t take long for me to fall in love with the Galaxy Z Fold 8. That’s just not something that happens often anymore. But fall in love with Samsung’s new foldable—I did. The Z Fold 8 is proof that great hardware still matters—and matters more than simply shoving in more AI features.
I like it more than the Z Fold 7 and the Z Fold 8 Ultra, mainly because its 4:3 inner screen makes consuming content a better and more fun experience than swiping on a long bar. One UI 9 is a very polished Android experience, and a feature like Quick Share, which lets you AirDrop files to Apple devices, is a game-changer. Anything that makes an Android phone work with Apple devices is a big plus to me.
There are still some minor things that people will find fault with, like the fact that Samsung has stuck with an IP48 rating for dust and water resistance instead of bumping that up higher to IP68 like Google did with the Pixel 10 Pro Fold or that Samsung didn’t bring back S Pen support. Neither omission makes the Z Fold 8 feel insufficient in my book. I’m not exposing the Z Fold 8 to harsh conditions and I have no attachment to a stylus.
Look, I get it: the Z Fold 8 is still expensive starting at $1,900. I don’t foresee the price of it coming down anytime soon. Samsung’s stuck to around $2,000 for its book-style foldables since the original Galaxy Fold. If you can justify the value of a larger screen experience, the Z Fold 8 is amazing in almost every aspect.
Samsung’s Galaxy Z Fold 8 is the best phone (not just foldable) I’ve ever used for consuming content—watching videos, playing mobile games, reading, and yes, even doomscrolling social media—thanks to its 7.6-inch inner screen.
The book-style foldable phone’s novel shape when closed may look strange at first, but I promise you that its shorter and wider footprint (when closed) quickly feels normal after a few days. The whole point of this form factor is to unfold it for its larger tablet-sized screen, and I can assure you that you’ll be doing that often because the experience encourages it more.
See Galaxy Z Fold 8 at Samsung
See Galaxy Z Fold 8 at Amazon
More importantly, the Z Fold 8 has fewer of the compromises that held back Samsung’s previous foldable phones. The device is lighter and easier to unfold, the battery is bigger and lasts all day, and Samsung has greatly reduced the crease on the inner screen.
Some apps still might not display correctly on both screens, but even so, I’m declaring the Z Fold 8 a home run. I can’t stop using it.
Samsung Galaxy Z Fold 8
The Galaxy Z Fold 8 is Samsung’s best version of a book-style foldable phone yet, even with its premium price.
The best size comparisons for the Z Fold 8 are a passport or a B7-sized notebook. The foldable measures 4.88 x 3.24 inches when it’s closed. It’s a few hairs thicker than the Z Fold 8 Ultra, but because of the squatter dimensions and lighter weight, the Z Fold 8 doesn’t feel unwieldy. I’m mostly able to reach corner to corner on the 5.5-inch AMOLED cover screen, something I haven’t been able to do on any “regular” (read: 6 to 6.9-inch) bar-style phone in years.
It also fits in my front pants pockets better than expected; I had concerns that the width might be too wide. I guess if you’re already used to the width of an iPhone 17 Pro Max or a Galaxy S26 Ultra, the Z Fold 8’s only slightly wider.
I’m able to reach the power button/fingerprint reader easily with my right thumb. Lefties might struggle since they can’t use their thumb and will have to register their index finger, which might be a little stretch to press the button, like it is for me. The volume rocker is a little high for me; I prefer its lower position on the Z Fold 7/Z Fold 8 Ultra. Typing with two hands on the cover screen is a much easier affair than on narrower phones; I made fewer typos compared to my iPhone. One-handed typing will depend on whether your hand is large enough and your thumb can stretch across the keyboard.
The 10:16 aspect ratio of the cover screen is also not as cramped as it seems. You lose vertical space compared to most regular phones and taller foldables like the Z Fold 8 Ultra, which means apps will show less and you’ll need to scroll more, but that’s mostly a non-issue if you open the phone and rotate it to vertical orientation. I never found myself bothered that I couldn’t see enough on the cover screen. If anything, I appreciated the shorter screen more because I didn’t feel compelled to pull it out as much unless I wanted to unfold it.
Like on the Z Fold 8 Ultra, you can use the Z Fold 8 in “tent” mode. This is great for propping up the device on a plane tray table or if you’re just too lazy to hold it up while in bed. I fly a lot for work, so tent mode is something I find very useful. A Z Fold 8 Ultra feature that you won’t find on the Z Fold 8 is “Flex mode.” On the Z Fold 8 Ultra, you can snap the screen so that it resembles a baby laptop, and some apps, like YouTube, will display the video above the crease and controls below it. I never found much utility for Flex mode on the previous Z Folds and I don’t miss it on the Z Fold 8. If that’s something you care about, get the Z Fold 8 Ultra instead.
Out of all the book-style foldable phones I’ve tested over the past seven years, the Z Fold 8 is the only one that I have unfolded more times than I have not. With each generation of Z Fold, Samsung made the dimensions more like a regular bar-style phone. I heaped praise on the Z Fold 7 for finally ditching the previous skinny, remote-like shape. And even though I considered the Z Fold 7 my favorite Android phone of 2025, I realized that I only used its inner screen maybe less than 50% of the time I pulled it out. With the cover screen being normal-sized, there just wasn’t as much of a need to unfold it for the 8-inch screen.
That hasn’t been the case with the Z Fold 8. Because of the shorter cover screen, I almost always unfold it to use the larger display. Maybe that’s because the Flex Titanium technology helps the hinge spring open better or the beveled aluminum frame makes it easier to unfold without needing fingernails, or both. Whatever the reasons are, it’s easier to see and feel the benefits of the larger size of the inner screen’s 4:3 aspect ratio for most content than on a more square-ish folding screen like the Z Fold 8 Ultra’s. To get roughly the same diagonal screen for widescreen videos on the Z Fold 8 Ultra, you need to rotate it, which is an extra step. It’s a tiny bit of friction that makes the task of quickly unfolding and getting more screen real estate less convenient. When you’re unfolding the phone dozens of times a day, that one extra step adds up.
After two weeks of using the Z Fold 8 and Z Fold 8 Ultra, I’ve concluded that if you watch more videos and game more than you read, the Z Fold 8 is the better foldable since you won’t need to rotate it so much. If you do more reading and split-screen multitasking, the Z Fold 8 Ultra is more suitable since you’ll get more vertical display on both the cover and inner screens without rotating, and you’ll do less scrolling.
I consume a ridiculous amount of content on a daily basis, so I find the 4:3 aspect ratio more versatile for my needs. In just two weeks, I watched, gamed, and read more on the Z Fold 8 than I have on any new phone I’ve ever tested. Videos look incredible on the 7.6-inch inner screen; 16:9 videos have minimal letterboxing (black bars) above and below them, and old content like many original anime series in 4:3 aspect ratio fill up the entire screen. I’ve never felt more informed and entertained from my phone.
As with the Z Fold 8 Ultra, the Z Fold 8 lets you run three apps in split-screen layouts or four (with a pop-up) on the inner screen. I wouldn’t recommend running more than two apps side by side in landscape orientation. Three apps side by side make each app window very skinny, and one app on one side and two stacked on the other half feel squished. Split-screen apps in vertical orientation just look too long to be useful in most cases. In some split-screen layouts, Samsung’s One UI 9 does let you tap between split-screen apps to have it fill more or most of the screen, but it’s not a function that’s easy to discover.
Performance from the Qualcomm Snapdragon 8 Elite Gen 5 for Galaxy chip is snappy and the 12GB of RAM on my 256GB review unit (you’ll get 16GB if you buy the 1TB model) never chugged when I threw Gemini and Galaxy AI tasks at it. The only thing that occasionally bugs me is that the Z Fold 8 gets toasty even when I’m not doing anything power-hungry. I suspect the super-thin design doesn’t leave much room for adequate thermals; there’s no vapor chamber for cooling like there is on the Galaxy S26 Ultra and iPhone 17 Pro.
The inner screen has been a joy to use, especially on my 1-hour subway commute to and from work. And instead of reaching for my iPad mini in bed, the Z Fold 8 now fills the role instead. It’s great only having to charge one device.
On the topic of charging, the Z Fold 8’s battery is rock solid, lasting me a full day even with heavy use of the inner screen. That’s not surprising since Samsung added a small percentage of silicon carbon into the 4,800mAh battery, which allows for the larger cell while maintaining a slim size. The 45W fast wired charging, with a compatible charger sold separately (of course), was more than quick enough to give me a recharge (around 0% to 65% in 30 minutes) whenever I was low on power. The Z Fold 8 also supports fast wireless charging at 20W, but I used it less compared to other phones like the iPhone 17 Pro or Pixel 10 Pro because Samsung still refuses to include built-in magnetic charging rings. You, again, need to buy a case with magnets to align the phone effortlessly with a Qi2 charger.
The only blemish, literally, on the larger screen experience is the 10-megapixel hole-punch camera on the inner screen. It can obscure essential parts of a menu, buttons, or text depending on what you’re looking at. For example, in Asphalt Legends, I couldn’t see a menu button that the hole punch covered. The hole punch is most noticeable when reading long blocks of text or black and white manga. It makes more sense to put the camera in the corner since it can’t fit in a bezel like on a regular tablet.
Other than that, I might nitpick the placement of the two stereo speakers. They’re located on the top and bottom of the cover screen, which makes them left-side oriented when the Z Fold 8 is unfolded. The speakers get loud enough, but because they’re both on the left in tablet mode, it almost sounds mono coming from one side. To be clear, these are stereo speakers. I get why Samsung might have designed it like this: the speakers fire out of the left and right in tent mode. Maybe put one speaker on each side for a balanced sound when it’s unfolded?
As for the crease… It’s less visible for sure, but hasn’t been completely eliminated. Fresh out of the box, the inner screen is pristine and crease-free. Two weeks in, the crease has deepened with hundreds of folds and I can see it when the screen is off, but it doesn’t warp as much as it did on past Samsung foldables. I almost never notice it when I’m watching videos, gaming, or reading. Besides the reinforced titanium alloy film on top of the screen and the titanium plate underneath it to ensure it stays flatter to the touch over time, Samsung also added an anti-reflective layer to reduce glare, and it really does help. I’ve said it before and I’ll say it again: the crease may never be fully eliminated from folding screens. The best we can hope for may just be making it less visible.
Depending on what you consider the Z Fold 8, either as the sequel to the Z Fold 7 or as a new class of foldables, the cameras will impress or disappoint. If viewed as a Z Fold 7 successor, the 50-megapixel main camera may feel like a downgrade from the previous 200-megapixel shooter. The 50-megapixel ultrawide on the Z Fold 8 will, however, be an upgrade from the Z Fold 7’s 12-megapixel one. You may also be upset it doesn’t have a telephoto lens.
If you want triple rear cameras and more resolution for the main camera, Samsung sells the Z Fold 8 Ultra. I have no complaints with the dual 50-megapixel rear cameras and dual 10-megapixel hole-punch cameras on the Z Fold 8. I don’t think most people will care there’s no telephoto. You still get a 2x zoom that crops in on the 50-megapixel sensor and looks nearly optical-quality to me. This is similar to the virtual 2x “telephoto” that you’ll find on other phones and all recent iPhones that have larger main sensors. The 4x and 10x zooms on the Z Fold 8 are digital, though, and the fuzzier image quality shows.
For everyday photos and videos, the Z Fold 8 cameras are good enough. Image quality looks vibrant and not overly saturated like it used to on Samsung phones and I think the HDR looks less processed compared to iPhone photos. Low-light shots look solid, too. If you’re the type of person who doesn’t want to spend too much or any time editing your photos, the Z Fold 8 photos are more than fine to post directly to social media.
The Z Fold 8 is loaded with a bunch of AI editing features, like “Photo Assist,” which lets you describe an edit with text; “My FanCam,” which lets you motion-track a subject in a video and then crop it for different aspect ratios for posting to social media; and a “Scan” feature that can clean up photos of documents (i.e. sharpen text, flatten and fix the geometry, and remove folded corners or fingers). These can be useful, but there already are apps that exist that do these things. I suppose it’s nice they’re free and built-in.
I also don’t hate any of the new video recording features, like the dual recording mode that lets you record from both the front and rear cameras simultaneously in various layouts (side by side, split top and bottom, and picture in picture) and super steady recording with horizon lock, which keeps the horizon line straight. Again, none are particularly special, but it’s nice that they’re there when you might need them.
It didn’t take long for me to fall in love with the Galaxy Z Fold 8. That’s just not something that happens often anymore. But fall in love with Samsung’s new foldable—I did. The Z Fold 8 is proof that great hardware still matters—and matters more than simply shoving in more AI features.
I like it more than the Z Fold 7 and the Z Fold 8 Ultra, mainly because its 4:3 inner screen makes consuming content a better and more fun experience than swiping on a long bar. One UI 9 is a very polished Android experience, and a feature like Quick Share, which lets you AirDrop files to Apple devices, is a game-changer. Anything that makes an Android phone work with Apple devices is a big plus to me.
There are still some minor things that people will find fault with, like the fact that Samsung has stuck with an IP48 rating for dust and water resistance instead of bumping that up higher to IP68 like Google did with the Pixel 10 Pro Fold or that Samsung didn’t bring back S Pen support. Neither omission makes the Z Fold 8 feel insufficient in my book. I’m not exposing the Z Fold 8 to harsh conditions and I have no attachment to a stylus.
Look, I get it: the Z Fold 8 is still expensive starting at $1,900. I don’t foresee the price of it coming down anytime soon. Samsung’s stuck to around $2,000 for its book-style foldables since the original Galaxy Fold. If you can justify the value of a larger screen experience, the Z Fold 8 is amazing in almost every aspect.
See Galaxy Z Fold 8 at Samsung
See Galaxy Z Fold 8 at Amazon
Source link
#Samsung #Galaxy #Fold #Review #Fun #Phone #Ages
Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.
Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?
“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.
There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.
Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.
Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.
“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.”
Image Credits:Phoenix Court
Top founders want to stay
Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.
“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia.
Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said.
Image Credits:Synthesia
Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.
Unsurprisingly, London’s AI boom is also causing a talent war.
U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up.
“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.
Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?
“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.
There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.
Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.
Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.
“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.”
Image Credits:Phoenix Court
Top founders want to stay
Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.
“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia.
Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said.
Image Credits:Synthesia
Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.
Unsurprisingly, London’s AI boom is also causing a talent war.
U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up.
“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?
The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details.
The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there.
This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.
Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.
Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?
“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.
There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.
Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.
Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.
“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.”
Image Credits:Phoenix Court
Top founders want to stay
Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.
“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia.
Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said.
Image Credits:Synthesia
Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.
Unsurprisingly, London’s AI boom is also causing a talent war.
U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up.
“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.
Why Do I Need a Bastion Host?
When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.
Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.
Mistakes Leading to Leaving Cloud Servers Open
The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.
Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.
System Administrators Guide to Secure Remote Access
Prohibit SSH password logins totally and depend exclusively on key-based authentication
Surely no one wants to type in the password every time; because of this, use only key-based authentication
Deter the user from logging in as root by default and instead use the sudo command to do root tasks
A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins
For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
Periodically change SSH keys and inspect access lists
Maintain records of login attempts and detect brute-force attacks as quickly as possible
Frequently Asked Questions
What is the principal means by which cloud servers suffer break-ins through remote access?
By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.
Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?
It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.
Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?
A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.
Bastion host vs VPN as methods of accessing the server?
The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.
How often should SSH keys be rotated?
The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.
Why is only changing the port number for SSH enough to secure that port?
Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.
Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.
Why Do I Need a Bastion Host?
When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.
Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.
Mistakes Leading to Leaving Cloud Servers Open
The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.
Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.
System Administrators Guide to Secure Remote Access
Prohibit SSH password logins totally and depend exclusively on key-based authentication
Surely no one wants to type in the password every time; because of this, use only key-based authentication
Deter the user from logging in as root by default and instead use the sudo command to do root tasks
A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins
For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
Periodically change SSH keys and inspect access lists
Maintain records of login attempts and detect brute-force attacks as quickly as possible
Frequently Asked Questions
What is the principal means by which cloud servers suffer break-ins through remote access?
By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.
Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?
It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.
Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?
A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.
Bastion host vs VPN as methods of accessing the server?
The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.
How often should SSH keys be rotated?
The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.
Why is only changing the port number for SSH enough to secure that port?
Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.
#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026
Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.
Why Remote Server Access Is a Common Attack Vector
Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.
How to lock down SSH access in the right way
The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:
Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.
Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.
Why Do I Need a Bastion Host?
When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.
Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.
Mistakes Leading to Leaving Cloud Servers Open
The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.
Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.
System Administrators Guide to Secure Remote Access
Prohibit SSH password logins totally and depend exclusively on key-based authentication
Surely no one wants to type in the password every time; because of this, use only key-based authentication
Deter the user from logging in as root by default and instead use the sudo command to do root tasks
A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins
For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
Periodically change SSH keys and inspect access lists
Maintain records of login attempts and detect brute-force attacks as quickly as possible
Frequently Asked Questions
What is the principal means by which cloud servers suffer break-ins through remote access?
By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.
Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?
It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.
Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?
A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.
Bastion host vs VPN as methods of accessing the server?
The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.
How often should SSH keys be rotated?
The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.
Why is only changing the port number for SSH enough to secure that port?
Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.
Do you remember a few years ago when it was reported the Leprechaun franchise was coming back? Lionsgate apparently means it for real this time, as it’s brought on two writers to script its new film.
That would be Patrick Melton and Marcus Dunstan, according to Deadline. After previously teaming on 2022’s Unhuman and the screen story for 2019’s Scary Stories to Tell in the Dark, the pair have reunited to revitalize this dormant franchise. In the producer’s chair are father-and-son duo Oren and Miles Koules—longtime producers on the Saw franchise—with the latter telling Deadline he was ready to work on “a terrifying new way into the rich world of Leprechaun.“
Last we heard in 2023, Lionsgate had filmmaker Felipe Vargas on hand to direct a new Leprechaun in what would’ve been his feature film debut. (Vargas’ takes comes after Jane Schoenbrun was approached to helm a reboot a year prior, which they ultimately passed on in favor of I Saw the TV Glow.) Plans with Vargas fell through, but the studio’s not given up, likely because of the success Alienand Predatorsaw when they came back to theaters. And they’re not the only ones: Texas Chainsaw Massacre and Nightmare on Elm Streetaren’t far behind, and Saw could be joining them as well.
Plot details on the Leprechaun revival are currently under wraps, but we’ll have more as news emerges—including whether Warwick Davis is game to make a return of some kind.
Do you remember a few years ago when it was reported the Leprechaun franchise was coming back? Lionsgate apparently means it for real this time, as it’s brought on two writers to script its new film.
That would be Patrick Melton and Marcus Dunstan, according to Deadline. After previously teaming on 2022’s Unhuman and the screen story for 2019’s Scary Stories to Tell in the Dark, the pair have reunited to revitalize this dormant franchise. In the producer’s chair are father-and-son duo Oren and Miles Koules—longtime producers on the Saw franchise—with the latter telling Deadline he was ready to work on “a terrifying new way into the rich world of Leprechaun.“
Last we heard in 2023, Lionsgate had filmmaker Felipe Vargas on hand to direct a new Leprechaun in what would’ve been his feature film debut. (Vargas’ takes comes after Jane Schoenbrun was approached to helm a reboot a year prior, which they ultimately passed on in favor of I Saw the TV Glow.) Plans with Vargas fell through, but the studio’s not given up, likely because of the success Alienand Predatorsaw when they came back to theaters. And they’re not the only ones: Texas Chainsaw Massacre and Nightmare on Elm Streetaren’t far behind, and Saw could be joining them as well.
Plot details on the Leprechaun revival are currently under wraps, but we’ll have more as news emerges—including whether Warwick Davis is game to make a return of some kind.
#Lionsgate #Bring #Leprechaun #LifeLeprechaun,Lionsgate">Lionsgate Is Trying to Bring ‘Leprechaun’ Back to Life (Again)
Do you remember a few years ago when it was reported the Leprechaun franchise was coming back? Lionsgate apparently means it for real this time, as it’s brought on two writers to script its new film.
That would be Patrick Melton and Marcus Dunstan, according to Deadline. After previously teaming on 2022’s Unhuman and the screen story for 2019’s Scary Stories to Tell in the Dark, the pair have reunited to revitalize this dormant franchise. In the producer’s chair are father-and-son duo Oren and Miles Koules—longtime producers on the Saw franchise—with the latter telling Deadline he was ready to work on “a terrifying new way into the rich world of Leprechaun.“
Last we heard in 2023, Lionsgate had filmmaker Felipe Vargas on hand to direct a new Leprechaun in what would’ve been his feature film debut. (Vargas’ takes comes after Jane Schoenbrun was approached to helm a reboot a year prior, which they ultimately passed on in favor of I Saw the TV Glow.) Plans with Vargas fell through, but the studio’s not given up, likely because of the success Alienand Predatorsaw when they came back to theaters. And they’re not the only ones: Texas Chainsaw Massacre and Nightmare on Elm Streetaren’t far behind, and Saw could be joining them as well.
Plot details on the Leprechaun revival are currently under wraps, but we’ll have more as news emerges—including whether Warwick Davis is game to make a return of some kind.
Post Comment