Flare unmasks PamDOORa: a $1,600 Linux backdoor that hijacks the PAM stack to harvest credentials and manipulate authentication logs to evade detection.

Most intrusion alerts start with failures.

Exploring vulnerable SSH configurations safely inside a local pentest environment

In the last article, we examined how nginx modules, a tool designed to serve web traffic, can be exploited by an attacker who has gained a…

Introduction

Difficulty: Easy

How to Navigate Home Directories, Read Hidden Files, and Manage Credentials Like a Linux Pro.

  TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200, with a CVSS 4.0 score of 9.2. A remote attacker can corrupt memory and run code o…

TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server corrupt the heap of a connecting client. Proof-of-concept exploit code …

A public proof-of-concept (PoC) exploit has been released for CVE-2026–55200, a critical vulnerability in the widely used libssh2 library…

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…

Introduction

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

A Linux Essentials article inspired by my OverTheWire: Bandit journey

Originally published at sshlab.eu

TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious SSH server corrupt memory on the machine that connects to it. VulnCheck disclosed the flaws on Ju…

Theoretical Overview

Learn how SSH tunnels securely forward network traffic, when local, remote, and dynamic forwarding help, and why they are best for controlled, temporary access.