#OpenSSH
All CosmicBytez Labs articles tagged #OpenSSH, across news, security advisories, how-to guides, and projects.
- News
Hackers Exploit 'SSHole' OpenSSH Flaw (CVE-2026-123158) to Breach Linux Systems
Attackers are exploiting CVE-2026-123158 in OpenSSH on musl-based Linux such as Alpine to log in without valid passwords. Update to 10.6p2.
- News
Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
OpenSSH's SSHole passwordless-login flaw sees exploitation, APT can run unverified packages as root, Zyxel switches fall, and 15,579 sites carry skimmers.
- News
Hackers Target OpenSSH 'SSHole' Flaw Within Hours, Gain Root on Honeypot
CVE-2026-123158 (CVSS 8.1) lets attackers log into password-disabled accounts on musl-based Linux. Previdian saw exploitation under nine hours after disclosure.
- HOWTO
OpenSSH Hardening with Certificate-Based Authentication
Replace static SSH keys with a short-lived certificate authority. Harden sshd_config, eliminate lateral-movement risk, and enforce zero-trust access...
- News
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
Sygnia researchers uncovered Velvet Ant, a China-nexus APT that spent close to a decade hidden inside Linux authentication infrastructure by backdooring...