The Hacker News (6 hours ago)
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long.
Read the full story on The Hacker News.
Erroneous or outdated DNS records can give attackers surprising powers over organizations’ email systems.
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.
OpenAI’s newest cybersecurity model comes out as AI labs face scrutiny of their work to protect digital infrastructure.
A joint U.S. government statement says the hacks are affecting the food, transportation, and healthcare industries after reports of global mass-hacks.
Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin’
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT.
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn’t.
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue.
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows.
69 active sources
24 Turkish · 45 English
All sources
