CybersecurityUpdated November 6

Report: attackers target OpenSSH flaw, gain root on honeypot.

Within hours of disclosure, threat actors were attempting to exploit the flaw, according to The Hacker News, which cites Previdian. The report says attackers gained root access on a honeypot. That is a result on a decoy system, not a confirmed compromise of an operational victim. The flaw’s scope remains narrow: Linux systems running OpenSSH on musl that don’t use PAM for password authentication, where it can enable sign-ins to accounts with no password. OpenSSH 10.6p2 includes a workaround.

1 publisher1 report

Coverage started November 6