Critical Linux SSH vulnerability *sshole is under active exploitation
A critical vulnerability dubbed *sshole, arising from the interaction between OpenSSH and the musl library, allows unauthenticated access to privileged accounts on affected Linux systems. Security firm Greynoise said its honeypots in Southeast Asia were targeted by a group it tracks as GT10, and that a backdoor used in the campaign appears to have been generated with AI.