OpenSSH 10.6p2 addresses an authentication bypass on musl Linux systems without PAM. Alpine details exposed configurations and patched packages. OpenSSH Ships Urgent Workaround for Alpine Password Bypass Key-only accounts can be exposed if SSH password authentication remains enabled. Alpine urges operators…
On November 4, 2026, Debian and Ubuntu shipped fixes for CVE-2026-109518, a flaw in apt, the package manager used by Debian, Ubuntu, and most of their derivatives. An attacker who can tamper with the network traffic between a machine and its package…
In other news: Fridge hacks also went after French blood banks; French bank hacked for $133 million; Thai opposition targeted with spyware. There can't be any newsletter edition without a dumb bug, and today's selection is a vulnerability codenamed SSHhole, discovered…
Sekoia's report includes a vulnerability, CVE-2026-3910, which was exploited to execute malicious code within Google Chrome iPhone users were reportedly targeted through separate exploit chains Since the Adreno GPUs are used in Snapdragon-equipped smartphones, devices running these chipsets were potentially…
On November 5, 2026, OpenSSH released version 10.6p2 to address a password authentication bypass affecting Linux systems that use musl libc without Pluggable Authentication Modules (PAM), including Alpine Linux’s default OpenSSH server configuration. The vulnerability allows an attacker to authenticate to certain password-disabled…
“It’s not every day that the ‘exploit’ for a vulnerability in a technology as prevalent as OpenSSH is just ‘send a long password’ or ‘send a lot of A characters,’ but here we are,” said Jake Knott, head of threat…
A ten-year-old flaw in OpenSSH could allow an attacker to use any password between 257 and 1,024 characters to access OpenSSH on certain Linux systems. Exploiting the vulnerability is relatively easy, too, prompting OpenSSH to rate the flaw as critical and release…
Data breaches can expose more than passwords and credit cards, giving criminals personal details they can use for convincing scams, identity theft, and fraud. Holiday shoppers should be especially cautious of fake online stores, fraudulent ads, and suspicious delivery notifications…
Certain configurations of Alpine are affected. Other distros may be as well. Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password. When…
openSUSE Leap 16.1 lets users choose between a conventional Linux installation and an immutable system from the same installer, bringing the previously separate Leap Micro into the fold. It's the first point release after Leap 16.0, which we looked at last year…
Lacros, Linux containers, Android apps, and Chromebook workflows.
An article joins this feed when it matches these terms. Each one is also a search of its own.