Related Threat Clusters
-
Critical OpenSSH Vulnerabilities Affecting Multiple Ubuntu Versions
Multiple vulnerabilities in OpenSSH have been discovered, affecting Ubuntu 22.04 LTS and its derivatives. Key issues include improper handling of the legacy scp protocol, which could lead to unintended setuid or setgid…
2 articles · Updated April 29, 2026 -
Critical OpenSSH Vulnerability Allows Privilege Escalation on Ubuntu Systems
A critical vulnerability in OpenSSH has been identified, affecting Ubuntu systems, particularly version 16.04. The flaw arises from improper handling of file permissions when downloading files as root using the legacy…
4 articles · Updated July 6, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
753 articles · Updated April 29, 2026 -
Unauthorized Account Removals from AWS Organizations Exploited by Threat Actors
Threat actors are exploiting AWS Organizations by using compromised credentials to remove accounts from organizations. This tactic allows them to bypass Service Control Policies (SCPs) and gain unrestricted access to…
2 articles · Updated May 19, 2026 -
Exploitation of macOS Native Tools for Stealthy Attacks on Enterprises
Recent research by Cisco Talos reveals that attackers are increasingly leveraging native macOS features to execute code and move laterally within enterprise environments. With over 45% of organizations now using macOS,…
2 articles · Updated April 22, 2026 -
Self-Propagating SSH Worm Exploits Weak Passwords in Seconds
A self-replicating SSH worm has been detected that can compromise Linux systems in just four seconds using credential stuffing techniques. The worm exploits weak authentication mechanisms, particularly targeting devices…
3 articles · Updated February 12, 2026 -
Honeypot-Omaha: Vulnerable DShield Sensor Attracts Threat Actors
Honeypot-Omaha is a DShield Sensor at the Internet Storm Center designed to attract cyber threats. It utilizes the cowrie tool to emulate SSH and Telnet ports, logging activities of potential threat actors. The system…
2 articles · Updated September 3, 2026 -
Evolution of Bug Bounty Programs Amid AI Challenges
Bug bounty programs are experiencing significant changes due to the rise of AI-assisted research and the emergence of validated vulnerabilities at machine speed. These trends have led to an influx of low-signal…
2 articles · Updated June 11, 2026 -
Multiple OpenSSH Versions Released with Security Enhancements
On July 13, 2026, three new versions of OpenSSH were released, specifically 1:10.2p1-2ubuntu3.4, 1:8.9p1-3ubuntu0.16, and 1:9.6p1-3ubuntu13.18. These updates include various security features and enhancements for the…
3 articles · Updated July 13, 2026 -
OpenSSH Portable Versions Released with Security Enhancements
On April 29, 2026, multiple portable versions of OpenSSH were released, including 1:10.2p1-2ubuntu3.2, 1:10.0p1-5ubuntu5.4, 1:8.9p1-3ubuntu0.15, and 1:9.6p1-3ubuntu13.16. These updates provide implementations of the…
4 articles · Updated April 29, 2026
Recent Intelligence Reports
- 1:8.9p1-3ubuntu0.17 — launchpad.net · September 3, 2026
- ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd) — Isc.Sans.Edu · September 3, 2026
- 1:9.6p1-3ubuntu13.18 — launchpad.net · July 14, 2026
- 1:10.2p1-2ubuntu3.4 — launchpad.net · July 14, 2026
- 2020 07 Sophos Xg Tale Of Unfortunate Re — code-white.com · June 11, 2026
- Meet Hades: The malware that lies to AI security agents — Csoonline · June 9, 2026
- CIRT insights: How to help prevent unauthorized account removals from AWS Organizations — Aws.Amazon · May 19, 2026
- 1:9.6p1-3ubuntu13.16 — launchpad.net · April 29, 2026