2024-07-03
If you have a server with SSH open to the internet, patch it NOW. Check it's version, if ssh is between version 4.4p1 and 8.5p1 then you are safe, outside of that patch it right away. If you can't patch it, set LoginGraceTime to 0. This could mean a DDOS but better that then pwnd
2024-07-02
If you have a server with SSH open to the internet, patch it NOW. Check it's version, if ssh is between version 4.4p1 and 8.5p1 then you are safe, outside of that patch it right away. If you can't patch it, set LoginGraceTime to 0. This could mean a DDOS but better that then pwnd
CSO
Qualys researchers say an OpenSSH flaw can let attackers remotely compromise servers and allow unauthenticated RCE as root; over 14M servers may be vulnerable
Researchers from Qualys say regreSSHion allows attackers to take over servers with 14 million potentially vulnerable OpenSSH instances identified.