#ssh
-
Tailworm: Tailscale SSH Flaws Could Let One Hacked Device Reach Root on Other Servers
Researcher Erica Windisch has detailed a chain of flaws in which a single compromised device on a Tailscale network can reach root on other machines. No patch exists yet.
-
Attackers Hijack 300 Tor Exit Relays to Steal SSH Passwords
In early October attackers seized more than 300 Tor exit relays and used them to redirect SSH connections to servers that harvested login passwords.
-
MikroTrick: Taking Over MikroTik Routers Without a Password or Key
CERT Polska has detailed a chain of two RouterOS flaws that let attackers gain full administrative control of Internet-exposed MikroTik routers without ever completing authentication.
-
MikroTrick: attacks on MikroTik routers via internet-exposed SSH
CERT Polska warns: attackers are gaining full administrative control over MikroTik routers without authentication by exploiting an internet-accessible SSH service. The attacks have been recorded since at least September 2.
-
OpenSSH 10.4 Released with Experimental Post-Quantum Signature Support
The new version of OpenSSH adds an experimental composite signature scheme based on ML-DSA 44 and Ed25519, and it also tightens the sandbox requirements for sshd on Linux.