#attackers

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts

A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes. "Apparently certain varieties of musl Linux (Alpine, OpenWrt, Buildroot, Yocto, etc.) have had this OpenSSH vulnerability for about a decade," writes longtime Slashdot reader AlteredEgg. "Upgrade now!" BleepingComputer reports: Security researcher Ozgun Kultekin, who discovered and released details on the vulnerability today, says the flaw has existed since 2016 and stems from how OpenSSH handles p

Slashdot · EN

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2. The flaw is in Active Storage, the part of Rails that handles file uploads. Some apps store

The Hacker News · EN

How malware and a bogus job interview let attackers nab $6.3B from Binance

Link URL: https://www.washingtonpost.com/technology/2026/11/03/how-malware-bogus-job-interview-let-attackers-nab-63b-binance/ Comments URL: https://tildes.net/~tech/1wrn/how_malware_and_a_bogus_job_interview_let_attackers_nab_6_3b_from_binance Votes: 4 Comments: 1

Tildes · EN