If a snort alert has no source port, Wazuh 4.14.x stores srcip without its last octet: 10.4.12.26 becomes 10.4.12. When the destination has a port, the port stays glued to dstip. Anything keyed on those fields, such as active response, CDB lists…
The scenario is fictional (10.0.0.0/8). The fan-out aggregation was tested on a synthetic firewall log. A burglar tries doors one by one. On a network that is one host connecting to many internal hosts on the same port, in a short…
Zyxel announced on November 3 that 10 models in its GS1900 network switch series contain a vulnerability (CVE-2026-107441) that could allow unauthenticated execution of OS commands. The company has also begun offering fixed firmware, "Patch 3." The issue is an out-of-bounds write in a…
This is not a reason to assume every Linux server is vulnerable. The issue depends on a specific interaction among OpenSSH, musl, PAM, password-authentication settings, and account records. Alpine’s own advisory says systems using openssh-server-pam with UsePAM yes, systems with…
Nvidia is marking the GeForce 8800 GTX's 20th anniversary with a free Steam demo that lets you unbox the card and install it in a virtual gaming PC. There's a twist: to revisit a graphics card from 2006, the Steam listing asks for…
On November 5, 2026, OpenSSH released version 10.6p2 to address a password authentication bypass affecting Linux systems that use musl libc without Pluggable Authentication Modules (PAM), including Alpine Linux’s default OpenSSH server configuration. The vulnerability allows an attacker to authenticate to certain password-disabled…
“It’s not every day that the ‘exploit’ for a vulnerability in a technology as prevalent as OpenSSH is just ‘send a long password’ or ‘send a lot of A characters,’ but here we are,” said Jake Knott, head of threat…
Since 2016, OpenSSH built without PAM on musl-based Linux, such as Alpine, could accept any password between 257 and 1,024 characters for accounts with no password set. OpenSSH 10.6p2 fixes it. Updated November 5, 2026 Research and disclosure: Özgün Kültekin, Wakefield · November 5, 2026 On affected servers, they…
A ten-year-old flaw in OpenSSH could allow an attacker to use any password between 257 and 1,024 characters to access OpenSSH on certain Linux systems. Exploiting the vulnerability is relatively easy, too, prompting OpenSSH to rate the flaw as critical and release…
Mình làm vận hành cho vài chục VPS và cluster nhỏ đã nhiều năm. Bài này là checklist mình thực sự dùng để harden sshd, kèm cách kiểm tra config như một attacker nhìn vào, chứ không chỉ sửa file…
Distributions, kernels, drivers, and desktop environments.
An article joins this feed when it matches these terms. Each one is also a search of its own.