OpenSSH

Qualys researchers say an OpenSSH flaw can let attackers remotely compromise servers and allow unauthenticated RCE as root; over 14M servers may be vulnerable

Qualys researchers say an OpenSSH flaw can let attackers remotely compromise servers and allow unauthenticated RCE as root; over 14M servers may be vulnerable

Researchers from Qualys say regreSSHion allows attackers to take over servers with 14 million potentially vulnerable OpenSSH instances identified.

OpenSSH says it will deprecate SHA-1 logins over security concerns, after researchers demonstrated an attack that cost under $50,000 in January 2020

Catalin Cimpanu / ZDNet :

OpenSSH patches critical flaw that allows a malicious server to force clients to leak private keys

Bug that can leak crypto keys just fixed in widely used OpenSSH  —  Vulnerability allows malicious servers to read memory on connecting computers.  —  A critical bug that can leak secret …