Comment on
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Reply in thread
Totally agree. Better still, don't expose OpenSSH directly to the internet. It's just too popular at this point and boasts way too many features. The pressure to break it is overwhelming. Layer your defences. You can use a VPN like IPSec, Wireguard, or Tailscale or even something as simple as spiped and you can configure OpenSSH's client with ProxyCommand to make it completely transparent. It's not that these won't have holes also, but hopefully not at the same moment OpenSSH has something.