Autor: Jaroslava Pokorná

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules…

Read More “Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot” »

OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is „more capable at finding and fixing vulnerabilities, and far more reliable staying within the boundaries researchers set,“ OpenAI said. It has…

Read More “OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits” »

Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. […]

Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. „While we investigated, we removed access to Reactor and Data Solutions,“ the company said. „At this time we continue to have no evidence that any…

Read More “Chainalysis Breach Exposes All Users‘ Credentials, Forces Shutdown of Key Services” »

A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin’s XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes…

Read More “Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs” »