Security News

Quickly audit and adjust SSH server configurations with SSH-audit (Help Net Security)
2016-10-14 14:30

SSH-audit is a standalone open source tool for auditing and fixing SSH server configurations. It has no dependencies and will run wherever Python is available. It supports OpenSSH, Dropbear SSH...

Old SSH Vulnerability at Center of Credential-Stuffing Attacks (Threatpost)
2016-10-13 15:27

Akamai warns that attackers are compromising IOT devices and using them as proxies to test stolen credentials against web-based applications.

Telnet, SSH prod of death smashes Cisco broadband boxes offline (The Register)
2016-10-12 23:23

Internet of Sins: Million more devices sharing known private keys for HTTPS, SSH admin (The Register)
2016-09-07 01:03

Private SSH Key, Weak Default Credentials Removed From ExaGrid Appliances (Threatpost)
2016-04-07 15:11

ExaGrid has removed public-private pairings and weak, hardcoded default credentials from its disk-backup appliances.

Cisco warns of 'critical' risks from web bugs and insecure SSH keys (The Register)
2016-04-07 00:01

Linode SSH key blunder left virtual servers open to man-in-the-middle fiddles for months (The Register)
2016-02-09 23:45

Fortinet on SSH vulnerabilities: look, this really isn't a backdoor, honest (SC Magazine)
2016-01-25 17:12

Fortinet Finds More SSH Backdoors (InfoRiskToday)
2016-01-25 13:57

SSH backdoor found in more Fortinet devices, exploit attempts spotted in the wild (Help Net Security)
2016-01-25 13:13

In case you missed it, Fortinet announced last week that the recently discovered FortiOS SSH backdoor - or, as they call it, "a management authentication issue" - has been found by its Product Securit...