Native macOS Secure Enclave SSH keys work but feel awkward
The author rejected that built-in workflow after also weighing Secretive, YubiKey, and password-manager agents.
1
Stories per day · 30 days
7 RSS
Relatedopenssh10musl8authentication-bypass7tailscale7alpine6privilege-escalation6headscale5alpine-linux4apache-airflow3ebury3lateral-movement3secure-enclave3tor3wireguard3brute-force2credential-theft2exit-nodes2federated-learning2
56 stories, newest first · one card per story
Stories tagged #ssh
OpenSSH musl flaw CVE-2026-123158 exploited for SSH access
The bug needs musl, no PAM, a SHA-256 or SHA-512 password account, and a passwordless shadow entry; Alpine is most exposed.
3
Fortinet sshd path traversal can bypass authentication without login
The CVSS 7.4 issue also covers FortiSASE, FortiProxy and FortiPam; the notice lists no versions or exploitation.
.png&w=828&q=75)
OpenSSH SSHole flaw exploited on musl Linux (CVE-2026-123158)
An oversized password can log in to accounts configured to reject password authentication.
Huntress launches Brute Force Sentry for RDP and SSH
Brute Force Sentry detects successful logins after failed attempts on exposed RDP RDWeb and SSH surfaces
1
arXiv study assesses post-quantum cryptography adoption in TLS
PQC support reaches only 9.1% for HTTPS and below 1% for other protocols at server level.
Portable OpenSSH 10.6p2 released
New release of OpenSSH includes security bug reports many of which were found with AI assistance.
Cursor Marketplace Hosts Malicious Claude Code Extension
Versions 2.1.312 and 2.1.313 of Anthropic's Claude Code extension were maliciously published for 11 hours targeting macOS and Windows users.
1
Tailscale patches SSH flaws enabling lateral movement inside tailnets
Fixes shipped in Tailscale v1.104.4; abuse still requires a device the tailnet policy already allows to use SSH.
Tailscale 1.104.4 fixes SSH flaws reaching root-only sockets
A policy-permitted SSH session could swap socket paths and reach Docker or the local API; no real attacks are reported.
Alpine iLX-F511 zero-day exposes hard-coded SSH credentials for code execution
Network-adjacent attackers need no login; ZDI rates ZDI-26-819 at CVSS 6.3 after a Pwn2Own finding.
Tailscale investigating Tailscale SSH privilege-escalation flaws
Authorized Tailscale SSH users may exceed their local-user permissions; a patched client is targeted for October 27.
Tailscale prepares client fix after uncoordinated Tailworm disclosure
Six high-severity findings in client 1.104.2 and headscale 0.29.5 can yield root via SSH forwarding; no exploitation is reported.
Unpatched Tailscale SSH flaws can give authorized users root
Cyberdione Labs detailed 11 Tailworm issues in Tailscale 1.104.2 and headscale v0.29.5; patches were expected October 27.
Airflow SSH provider before 7.0.1 runs environment values as shell
SSHRemoteJobOperator quotes templated environment values only once inside an already-quoted wrapper, so $(...) runs remotely.
Tailscale SSH flaws can yield root on connected servers
Lab tests on Tailscale 1.104.2 and headscale 0.29.5 showed root via privileged socket forwarding; no fixes yet.
Researcher reports Tailscale SSH flaws that can yield root across servers
Eleven unconfirmed findings in tailscale 1.104.2 and headscale 0.29.5 have no CVE, bulletin, or fix.
333 Tor exit nodes hijacked to intercept SSH and email
Attackers reused a password, installed the Ebury backdoor, and sent port-22 SSH to 12 servers from October 2 to 5.
Energize Lab responds after Eiliko robots expose customer data
The Verge says photos, audio, and SSH access remained reachable after the company claimed external access was closed.
Net::LibSSH before 0.004 skips SSH host-key checks (CVE-2026-94423)
connect() never compares the server host key with known_hosts, so the client can accept an unverified server.
Rex through 1.16.1 accepts unknown SSH host keys (CVE-2026-94140)
The Perl automation tool hardcodes StrictHostKeyChecking=no for remote rsync, so an unknown SSH host key is accepted.
Attackers hijacked 300-plus Tor exits to steal SSH passwords
Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.
Attackers compromise 333 Tor exits to steal SSH passwords and deploy Ebury
The relays were about 10% of Tor’s exit capacity; Tor flagged them BadExit by October 4 and infected servers were shut down October 5.
Guide stores macOS SSH keys in the Secure Enclave with Touch ID
Non-extractable p-256-ne identities die with the Mac and must be re-registered, including on GitHub.