highcyber attacks
Hackers Target OpenSSH Vulnerability Within Hours of Disclosure, Gain Root on Honeypot
Rapid exploitation of a critical OpenSSH flaw prompts urgent mitigation calls
Cyber.TechVoid1 min read
Key Takeaways
- Active exploitation of a critical OpenSSH vulnerability reported within hours of disclosure.
- Affected systems run OpenSSH on Linux with the musl C library and PAM disabled.
- The flaw enables passwordless authentication and potential root-level compromise.
- Administrators should review configurations and apply official OpenSSH patches immediately.
Related Security News
highvulnerability
Race Condition in WordPress Core Update Process Leaves Sites Vulnerable During Patching
A race condition in the WordPress core update mechanism allows remote code execution on servers if an attacker strikes during the file unpacking phase. The update process uses legacy, unpatched code to unpack new files, creating a window of exposure even after a security fix is applied. Picus Security researcher Umut Bayram reported the issue, noting that active exploitation is occurring in the wild. The recommended mitigation is to block web access to the update directory during the patching process.
The Hacker News1 min read
