Vulnerability that lets hackers SSH into Linux devices is under active exploitation
2026-11-09T20:51:38Z•eefcc18e678ff0ada810294764833c7b77a3aef39852c282ed2f490e733f17be
AI securityAPI keysAndroidLinuxPHPSSHSecure BootTLS certificatesTorUEFIactive exploitationbotnetcredential theftcrypto theftdata breachfirmwareiOSmobile malwarepasswordless accessphishingremote code executionsecrets exposuresupply-chain compromise
What happened
Security news feed dominated by active exploitation and critical vulnerabilities affecting Linux SSH access, UEFI firmware, PHP applications, mobile devices, and TLS certificate infrastructure, alongside major credential theft, supply-chain compromises, botnets, crypto theft, data leaks, and AI-tool secret exposure. The highest-priority item is active exploitation of the “*sshole” vulnerability, which may permit passwordless SSH access on affected Linux configurations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- eefcc18e678ff0ada810294764833c7b77a3aef39852c282ed2f490e733f17be
- Enrichment time
- 2026-11-09T20:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.