ssh2rce — Remote Code Execution in Secure Shell (SSH)
An authenticated remote attacker can execute arbitrary commands on affected servers with the privileges of the compromised account. No user interaction is required. No patch is available.
#openssh #ssh2rce #itsec #itsecurity #authentication #attack #nouseri #patch #nopatchavailable #nopatch #ssh #remotecodeexecution #secureshell
Hackers exploit #SSHole #OpenSSH flaw to breach #Linux systems
Your AI tool doesn't need your SSH keys.
This week a thread reported an AI desktop app forwarding users' SSH agents to remote machines.
Bufflehead is a native desktop app that lets your AI tool run read-only SQL on Postgres or MySQL behind an SSH jump host. It holds the tunnel itself and always checks the host key, with no option to skip it. Nothing is routed through a Bufflehead cloud.
Free for Mac, Windows and Linux, no sign-up: https://bufflehead.app
Did you know you can view your TOTP MFA Credentials with just one click? 👀
⚙️ For Windows users, go to View → TOTP MFA Credentials
⚙️ For macOS users, you can add it with View → Customize Toolbar…
#automation #devops #itadmin #remotemanagement #rdp #remotedesktop #ssh #productivity #techtools #techthreads
SSH's three forward flags differ by one thing: which machine holds the listening socket.
-L listens locally and dials from the server. -R is the reverse. -D is a local SOCKS proxy.
Trap: GatewayPorts defaults to no, so -R 0.0.0.0: binds loopback anyway. In -L 8080:localhost:80, localhost is the remote box's loopback.
ExitOnForwardFailure defaults to no, so a bad forward reports success.
https://www.fosslinux.com/163701/ssh-tunnels-local-remote-dynamic-forwarding.htm
The Internet Last Week
Beget cloud data cyber attack
https://therecord.media/russia-cyberattack-beget-cloud
Fedora 45 released with IP6-mostly support
https://docs.fedoraproject.org/en-US/release-notes/f45/
https://fedoraproject.org/wiki/Changes/IPv6-Mostly_Support_In_NetworkManager
Mullvad DNS over HTTPS service shutdown
https://mullvad.net/en/blog/shutting-down-our-public-encrypted-dns-servers-and-sponsoring-quad9-instead
OpenSSH server auth bypass
https://hachyderm.io/@damienmiller/117563026759098135
https://www.alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://sshhole.com/
https://nvd.nist.gov/vuln/detail/cve-2026-123158
Tor bastet dirauth server plausibly compromised
https://gitlab.torproject.org/tpo/core/tor/-/work_items/41473
Et on met à jour ses OS, SVP !!!
https://www.cyberattaque.org/openssh-cve-2026-123158/
OpenSSH SSH authentication bypass on Alpine Linux with musl libc
🔗 https://cybersecurefox.com/en/ssh-authentication-bypass-openssh-musl-alpine-linux
#OpenSSH #Alpine #Linux #musl #libc #SSH #authentication #CVE-2026-123158
#JetBrains 2026.3 released with native OpenSSH support!
Finally able to connect to my hosts with only post-quantum cryptography (PQC) 🎉
Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability
Attackers have started targeting the SSHole authentication bypass affecting certain OpenSSH servers, according to new SANS Internet Storm Center findings. The flaw allows remote attackers to access some password-disabled Linux accounts by submitting an unusually long password, without knowing valid credentials or holding an SSH key. SANS researcher Johannes Ullrich reported the first clear exploit […] The post Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability appeared first on Cyber Security News .
Pulse ID: 6af1605e6f4d7e48b48d2f4f
Pulse Link: https://otx.alienvault.com/pulse/6af1605e6f4d7e48b48d2f4f
Pulse Author: CyberHunter_NL
Created: 2026-11-09 05:55:42
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
SSHOLE (CVE-2026-123158) live tracking. sshole.events.greynoise.io
#ssh #cve #sshhole #sshole #security
SSHOLE (CVE-2026-123158) live tracking. sshole.events.greynoise.io
#ssh #cve #sshhole #sshole #secirity