OpenSSH SSHole Flaw Exploited as CISA Orders Rapid Patching
Attackers are exploiting the OpenSSH SSHole password bypass on certain musl Linux systems. CISA has listed the flaw and Alpine urges updates and sshd restarts.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
Attackers are exploiting the OpenSSH SSHole password bypass on certain musl Linux systems. CISA has listed the flaw and Alpine urges updates and sshd restarts.
Read more →
Debian and Ubuntu patch an APT flaw that lets attackers manipulating HTTP downloads replace verified packages and run code as root during software installation.
Read more →
Attackers hijacked cPGuard updates to steal secrets from nearly 3,000 servers. OpsShield urges software updates, password resets and stolen SSH key replacement.
Read more →
Google disrupted the XCPE botnet on more than 1.3 million Android TV boxes, banned manufacturer Videostrong and targeted affiliate malware infrastructure.
Read more →
Linux flaw CVE-2026-98432 enables remote root access in an MPTCP proof of concept. Guidance details interim defenses while some kernel patches remain pending.
Read more →
Binance estimates a $6.3 billion security incident and freezes about $3 billion in assets as deposits and withdrawals remain suspended during its investigation.
Read more →
Lumen links Volt Typhoon to four zero-day campaigns using Silent Train, a changing relay network targeting enterprise systems and U.S. critical infrastructure.
Read more →
GMO says a leak-site domain was suspended after its cloud breach, which potentially affected 26,739 servers. Threatened ransomware remained unconfirmed.
Read more →
UNM Health diverted ambulances and canceled clinic visits after a cybersecurity incident. Hospitals reopened, with clinic services set to resume on Tuesday.
Read more →
A malicious AGENTS.md file triggered a blocked malware install. Researchers tested Codex and Claude Code attacks and urged checks on agent files and settings.
Read more →