OpenSSH

Qualys researchers say an OpenSSH flaw can let attackers remotely compromise servers and allow unauthenticated RCE as root; over 14M servers may be vulnerable

Qualys researchers say an OpenSSH flaw can let attackers remotely compromise servers and allow unauthenticated RCE as root; over 14M servers may be vulnerable

Researchers from Qualys say regreSSHion allows attackers to take over servers with 14 million potentially vulnerable OpenSSH instances identified.

OpenSSH says it will deprecate SHA-1 logins over security concerns, after researchers demonstrated an attack that cost under $50,000 in January 2020

Catalin Cimpanu / ZDNet :

Microsoft quietly adds beta of native OpenSSH client and server to Windows 10

John Biggs / TechCrunch :

OpenSSH patches critical flaw that allows a malicious server to force clients to leak private keys

Bug that can leak crypto keys just fixed in widely used OpenSSH  —  Vulnerability allows malicious servers to read memory on connecting computers.  —  A critical bug that can leak secret …

OpenSSH 4.4 released

The OpenSSH team has officially realeased OpenSSH 4.4/4.4p.  The latest updates to the popular ssh server and ssh/sftp client include some extremely advanced features for administrators, as well as th...