33 hours ago
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
What's happening
SignalsMonitor is following this as a security story. Ars Technica and BleepingComputer are the outlets attached to this story. The first report grouped here was at 5 Nov 2026, 17:45 UTC. 2 material updates are listed in the timeline. The headline in use is “Meet *sshole, the vulnerability that lets hackers SSH into Linux devices”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password. The vulnerability exists in the interaction between OpenSSH, the code library implementing SSH connections, and musl, a lightweight alternative to the libc library…
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
OpenSSH flaw lets attackers log into password-disabled Linux accounts
- New development reported by Ars Technica
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Same story, different outlets
2 headlinesEach line is that outlet's headline. The article stays on the publisher's site.