Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast

Help Net Security reports active exploitation of CVE-2026-123158, an OpenSSH vulnerability allowing remote attackers to log into passwordless accounts on Alpine Linux and other musl-based systems. The issue was fixed in OpenSSH 10.6p2 and reportedly requires only network access to an SSH service. Additional coverage discusses attacks against refrigeration controllers supporting food and medicine, suspicious residential-proxy traffic exiting the White House network, AI security testing, and identity and access-control risks involving autonomous AI agents and long-lived repository tokens.