The password authentication bypass affects default Alpine Linux OpenSSH configurations and potentially other musl-based Linux distributions, allowing attackers to gain root access to exposed servers without valid credentials.
arstechnica.com
The password authentication bypass affects default Alpine Linux OpenSSH configurations and potentially other musl-based Linux distributions, allowing attackers to gain root access to exposed servers without valid credentials.
The vulnerability allows remote code execution via malicious image files opened in MS Paint, affecting all supported Windows versions; Microsoft has released a security patch to address the issue.
Anthropic's AI coding tool transmits the user's registered email address to every third-party site it accesses, creating a privacy risk for individual and enterprise users; the company is developing a fix for the issue.
CERT-IN warns of a significant escalation in AI-driven cyberattacks targeting Indian financial technology firms, with threat actors striking weekends and after security upgrades when defender coverage is lowest.
Thinking Machines' new open-weight 594B parameter model matches or exceeds the performance of larger closed models on standard benchmarks, with full Apache-licensed weights scheduled for public release next week.
Check Point's ARTEX report identifies a growing ecosystem of 1,600+ live servers used to run AI-assisted cyberattacks, including automated phishing and exploit generation tools available to threat actors.