Security is not a product, but a process. — Bruce Schneier

SSH adalah jalur utama Anda untuk mengelola server dari jauh. Jika ini bobol, habislah sudah. Jadi, amankan baik-baik! File yang akan kita…

OpenSSH (before 10.1) has a flaw (CVE-2025-61984) that allows RCE when ProxyCommand is used. Attackers exploit control characters in usernames to inject commands.

OpenSSH 10.1 is released with a critical fix for shell injection, a new warning for weak crypto, and socket relocation for enhanced security and performance.

OpenSSH (before 10.1) has a flaw (CVE-2025-61984) allowing RCE via the ProxyCommand and specially crafted usernames. The exploit uses shell syntax errors in Bash to inject malicious commands.

Cyble exposed a Sandworm-linked espionage campaign targeting Belarusian military UAV personnel. It uses a malicious LNK file to deploy OpenSSH over Tor obfs4 for stealthy, persistent remote access.

SEQRITE exposed SkyCloak, an espionage campaign targeting Russian/Belarusian military personnel. It uses malicious LNK files to deploy OpenSSH over Tor obfs4 bridges for stealthy, persistent remote access.

Operation SkyCloak targets Russian/Belarus defense with a multi-stage backdoor using OpenSSH and Tor/obfs4 for stealthy C2. The malware checks for sandboxes before execution.

A critical security vulnerability has been identified in Moxa’s industrial ethernet switches, threatening the integrity of operational technology (OT) networks. The vulnerability, tracked as…

A pre-auth flaw in OpenSSH's GSSAPI Key Exchange (CVE-2026-3497) exposes Ubuntu and Debian servers to heap corruption and data leaks. Patch now.

In the critical infrastructure of the internet, OpenSSH stands as one of the most vital gatekeepers for secure remote access. However, even the most trusted tools require constant refinement. A se…

The OpenSSH architects have promulgated version 10.3—an iteration that proves significantly more profound than a mere routine synchronization.

Sygnia exposes Operation Highland: China-linked Velvet Ant persisted for nearly 10 years in an air-gapped network by backdooring PAM and OpenSSH.

A China-nexus threat group known as Velvet Ant hid inside one organization’s network for nearly a decade. Sygnia’s incident response team uncovered the campaign and named it Operation …

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…