OpenSSH flaw lets attackers log into password-disabled Linux accounts

By Lawrence Abrams · BleepingComputer · Thursday, 5 November 2026 at 17:45 (7h ago) · Original article ↗

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

FBI, CISA warn of cyberattacks targeting refrigeration systems

The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards. [...]

BleepingComputer 4m ago

Security

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Certain configurations of Alpine are affected. Other distros may be as well.

Ars Technica 2h ago

Security

6 Best VPN Services (2026), Tested and Reviewed

Every VPN says it’s the best, but only some of them are telling the truth.

Wired 2h ago

OpenSSH flaw lets attackers log into password-disabled Linux accounts

More Security & Privacy

FBI, CISA warn of cyberattacks targeting refrigeration systems

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

6 Best VPN Services (2026), Tested and Reviewed