Welcome to our

Cyber Security News Aggregator

.

Cyber Tzar

provide a

cyber security risk management

platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.

New OpenSSH Vulnerability

published on 2026-11-10 12:02:38 UTC by Bruce Schneier
Content:

It’s a bad one, and it’s been in the code for a decade:

A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password.

“Oversized” means longer than 256 bytes. Details.

Slashdot thread. And another news article.

Article: New OpenSSH Vulnerability - published about 2 hours ago.

https://www.schneier.com/blog/archives/2026/11/new-openssh-vulnerability.html   
Published: 2026 11 10 12:02:38
Received: 2026 11 10 12:19:46
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Views: 0

Custom HTML Block

Click to Open Code Editor