CyberPulse Cybersecurity News, with Source Links
FA
CSO Online

OpenSSH flaw lets attackers access password-disabled accounts on some Linux systems

A critical vulnerability that affects OpenSSH servers on Linux systems built with the musl C library instead of glibc allows remote attackers to easily bypass authentication and log into accounts that should have password authentication disabled. The flaw impacts the lightweight Alpine Linux, which is widely used for cloud Docker container images, as well as Linux distributions for embedded systems. The security bug,…

Vulnerabilities & Zero-Day Cloud Security Threat Intelligence DevOps & Infrastructure Operating Systems Robotics & Embedded Identity & Access Security
Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Microsoft Security Blog

Threat actors use agentic AI tooling to find and abuse exposed secrets

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in the application’s tenant. Agents operating on behalf of threat actors then used the compromised OAuth applications to perform a variety of subsequent actions wi…

Threat Intelligence Identity & Access Security
Source
EFF

Reflecting on Digital Rights Wins and Losses in Sacramento

California’s 2026 legislative session has officially adjourned and it’s time to reflect on the wins and losses that have shaped Californians’ digital rights landscape this year. This was the second year of a two-year legislative session, which meant several bills resumed their legislative paths from 2025. EFF monitored nearly 100 bills in the state over the two-year session. These included proposed regulations on 3D…

Vulnerabilities & Zero-Day AI Security AI & Machine Learning
Source