ITsecurity Daily
Daily Briefing
OpenSSH 'SSHole' exploited within hours of disclosure; WordPress and Ivanti flaws now on CISA's exploited list
Good morning. Help Net Security reported that an OpenSSH flaw nicknamed SSHole, found by Wakefield researcher Özgün Kültekin, lets remote attackers log into accounts that have no password set on Alpine Linux and other musl-based systems. Threat intelligence firm Previdian warned that it is being exploited. The Hacker News reported that threat actors attempted exploitation within hours of disclosure and gained root on a honeypot. Help Net Security reported that the fix was released on 5 November as OpenSSH 10.6p2; apply it.
The WordPress flaw CVE-2026-119977 carries CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 8.1) and is on the CISA KEV catalog as known to be exploited; the advisory lists WordPress 4.7 up to the fix in 4.7.39 as affected. The Hacker News reported that Picus Security researcher Umut Bayram found some sites can still be attacked while installing the fix, because the update unpacks its files using the site's old, unpatched code. Follow WordPress's advisory (https://wordpress.org/news/2026/10/wordpress-7-1-4/) and apply the named patch.
Ivanti's CVE-2026-118527 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, base 4.3) is also on the CISA KEV catalog and affects Ivanti Connect Secure 22.8; follow Ivanti's advisory. CISA's 6 November alert added a SonicWall SonicOS SSLVPN single-factor authentication vulnerability to the KEV catalog based on evidence of active exploitation.
Zoom out: CISA added one vulnerability to its Known Exploited Vulnerabilities catalog on 6 November, a SonicWall SonicOS SSLVPN single-factor authentication flaw.
Vulnerability in focus
CVE-2026-118527 — Ivanti. CVSS 4.3 CISA lists it as known to be exploited.
Affected: ivanti-cs.
What to do: Follow the vendor advisory for the fixed release and any interim mitigation.
Elsewhere
- BleepingComputer: SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks Read it
- CISA: CISA Adds One Known Exploited Vulnerability to Catalog Read it
- BleepingComputer: OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs Read it
- The Record: Medical services company settles with 4 states over 2023 hack of sensitive patient records Read it
- SecurityWeek: Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks Read it
- BleepingComputer: QNAP says hackers breaching NAS devices in Plex2Shell attacks Read it
- The Record: FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers Read it
- The Hacker News: OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits Read it
- The Hacker News: Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot Read it
- The Hacker News: Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time Read it
- SecurityWeek: In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days Read it
- The Record: CEO-spoofing scammers indicted for using AI to help steal more than $100 million Read it
Sources
- Runaway AI hacking agent behind WorkOS breach after escaping sandbox BleepingComputer
- Medical services company settles with 4 states over 2023 hack of sensitive patient records The Record
- Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks SecurityWeek
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time The Hacker News
- DigiCert admits 16-month security lapse exposed customer information The Register
- OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) Help Net Security
- CISA Adds One Known Exploited Vulnerability to Catalog CISA
- OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs BleepingComputer
- Certificate authority DigiCert reports data breach involving business customer info The Record
- Fake security tools on GitHub push backdoors and infostealers BleepingComputer
- QNAP says hackers breaching NAS devices in Plex2Shell attacks BleepingComputer
- FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers The Record
- Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot The Hacker News
- OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits The Hacker News
Share this issue
Facebook · X · Reddit · LinkedIn · WhatsApp · Email · Bluesky
Every briefing is on the site, with the advisory record behind it. All briefings