Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Ars Technica security feed covering major vulnerability disclosures, active exploitation, supply-chain compromises, botnets, credential and data theft, firmware and bootkit attacks, mobile spyware, and large-scale cybercrime incidents. The most urgent items include a passwordless SSH vulnerability affecting some Alpine Linux configurations, a critical EDK2 UEFI code-execution flaw, active exploitation of Plex vulnerabilities and PHP2Shell, compromised TLS certificate authorities, and a UEFI bootkit targeting fully patched Windows systems.