News
cybersecurity QNAP says hackers breaching NAS devices in Plex2Shell attacks - BleepingComputer cybersecurity Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time - The Hacker News cybersecurity Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot - The Hacker News vulnerability USN-8952-2: Tornado regression - Ubuntu Security Notices threat-intel Cyber Brief 26-11 - October 2026 - CERT-EU Threat Intelligence cybersecurity OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits - The Hacker News cybersecurity In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days - SecurityWeek cybersecurity Chainalysis says breach exposed credentials for all customers - BleepingComputer cybersecurity DigiCert Data Breach Impacts Business Customer Information - SecurityWeek cybersecurity Why Europe's Freezer Hacks Spread So Far, So Fast - Dark Reading cybersecurity OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line - SecurityWeek ai The Download: a humanoid cleans house and Samsung builds for the AI boom - MIT Technology Review cybersecurity Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack - SecurityWeek cybersecurity D-Link warns of multiple zero-days in DGS-3130 Series switches - BleepingComputer cybersecurity OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass - SecurityWeek
1 / 15
All news ›
Cybersecurity

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

The Hacker News ·

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.