The Wave

1. 6d agoArs Technica · research by GreyNoiseVulnerability that lets hackers SSH into Linux devices is under active exploitationAttackers are actively exploiting the SSHole flaw (CVE-2026-123158) in OpenSSH on musl-based Linux systems to bypass password authentication, with GreyNoise recording successful in-the-wild exploitation chains including attempts at persistence and a TAC Agent implant.

   3 articles · BleepingComputer, Ars Technica Space

   1. 6d agoBleepingComputerEarliestHackers exploit SSHole OpenSSH flaw to breach Linux systems
   2. 6d agoArs TechnicaPickupVulnerability that lets hackers SSH into Linux devices is under active exploitation
   3. 6d agoArs Technica SpacePickupVulnerability that lets hackers SSH into Linux devices is under active exploitation

   CyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks6 linked

• Ars Technica
• Ars Technica Space
• BleepingComputer

Mainstream pickup 6d ago.

• NewsVulnerability that lets hackers SSH into Linux devices is under active exploitationBoth involve OpenSSH, musl, GreyNoise
• NewsHackers exploit SSHole OpenSSH flaw to breach Linux systemsBoth involve OpenSSH, musl, GreyNoise

• OpenSSH
• musl
• GreyNoise
• Linux