Sekoia's report includes a vulnerability, CVE-2026-3910, which was exploited to execute malicious code within Google Chrome iPhone users were reportedly targeted through separate exploit chains Since the Adreno GPUs are used in Snapdragon-equipped smartphones, devices running these chipsets were potentially…
On November 5, 2026, OpenSSH released version 10.6p2 to address a password authentication bypass affecting Linux systems that use musl libc without Pluggable Authentication Modules (PAM), including Alpine Linux’s default OpenSSH server configuration. The vulnerability allows an attacker to authenticate to certain password-disabled…
“It’s not every day that the ‘exploit’ for a vulnerability in a technology as prevalent as OpenSSH is just ‘send a long password’ or ‘send a lot of A characters,’ but here we are,” said Jake Knott, head of threat…
A ten-year-old flaw in OpenSSH could allow an attacker to use any password between 257 and 1,024 characters to access OpenSSH on certain Linux systems. Exploiting the vulnerability is relatively easy, too, prompting OpenSSH to rate the flaw as critical and release…
Data breaches can expose more than passwords and credit cards, giving criminals personal details they can use for convincing scams, identity theft, and fraud. Holiday shoppers should be especially cautious of fake online stores, fraudulent ads, and suspicious delivery notifications…
Certain configurations of Alpine are affected. Other distros may be as well. Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password. When…
openSUSE Leap 16.1 lets users choose between a conventional Linux installation and an immutable system from the same installer, bringing the previously separate Leap Micro into the fold. It's the first point release after Leap 16.0, which we looked at last year…
Published 5 Nov 2026, 23:20 UTC 12outlets comparedA wider view of the story Oversized passwords (257–1,024 chars) bypass password authentication on musl-based Linux, including Alpine. Emergency fix Portable OpenSSH 10.6p2 released Nov 5, 2026 to block bypass on musl systems. 12 outlets in this story. Read their headlines below.
The DreamHost data breach matters because it hit the credentials that control website files and email, not just a marketing database. A stolen FTP password lets someone read, replace, or poison a live site. A stolen webmail session lets someone…
OpenSSH 10.6p2 shipped on November 5, 2026, and it closes a critical password authentication bypass. On affected systems, anyone who can reach the SSH port can log in without knowing a password. If you run sshd on musl-based Linux with pluggable authentication modules…
Distributions, desktops, kernels, package managers, terminal culture, and FOSS apps.
An article joins this feed when it matches these terms. Each one is also a search of its own.