Scans for SSHole vulnerability (CVE-2026-123158) increase in honeypots
Honeypots report increase in SSH attacks for sshole starting November 1, with first exploits on November 5.
Stories per day · 30 days
3 RSS
Relatedssh2banking1cowrie1credential-abuse1honeypot1huntress1incident-response1rdp1siem1sshole1third-party-risk1unit-421vpn1wsus1
12 stories, newest first · one card per story
Stories tagged #brute-force
Huntress launches Brute Force Sentry for RDP and SSH
Brute Force Sentry detects successful logins after failed attempts on exposed RDP RDWeb and SSH surfaces
1
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
An opportunistic attacker used stolen credentials and a misconfigured gateway to probe a European bank.
2
Denmark population registry data breach affects 8.8 million people
Denmark's population registry says attackers exposed personal data on about 8.8 million people.
Schneider Electric PowerChute Serial Shutdown
CISA and Schneider Electric warn that PowerChute Serial Shutdown 1.5 and prior lack brute-force protection, allowing unauthorized account access via unlimited authentication attempts.
2
The 20 Most Common Passwords Hackers Target in 2026
Huntress details the 20 most common passwords of 2026 and how attackers use brute force, spraying, and credential stuffing against weak credentials.
4
Scans for Proxmox Servers, (Wed, Sep 9th)
SANS observed increased scanning and brute-force attacks on port 8006 targeting unsupported Proxmox VE 7 servers after a recent vulnerability advisory.
2
The Oracle of Delphi Will Steal Your Credentials
Akamai honeypots reveal attackers brute-forcing RDP credentials to download and execute a previously undetected malware family named Trojan.sysscan.
2
Password spraying campaign targets AWS root user accounts across 150+ organizations
Datadog researchers observed a password spraying campaign attempting to authenticate as AWS root users across 150+ organizations.
2
Rockwell Automation OTTO Fleet Manager
CISA warns Rockwell Automation OTTO Fleet Manager (CVE-2026-75112, CVSS 6.8) uses insufficiently costly password hashing, easing offline brute-force attacks.
Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
2
Mirai Variant V3G4 Targets IoT Devices
Unit 42 tracked the Mirai variant V3G4 exploiting 13 vulnerabilities across IoT devices and servers from July-December 2022 to build a DDoS botnet.
3