Security news.
Critical infrastructure and authentication systems are under heightened pressure today as federal agencies issue urgent alerts over widespread attacks on industrial refrigeration controllers. Meanwhile, administrators face urgent patching demands for an OpenSSH authentication bypass affecting musl-based Linux distributions alongside a remote root exploit chain in Barracuda Email Security Gateways. A major credential breach at Chainalysis and multiple hardware vulnerabilities also demand immediate security attention.
CISA and FBI Warn of Cyberattacks Targeting Refrigeration Systems
Federal agencies issued an urgent advisory warning that threat actors are actively targeting industrial refrigeration and cold-chain monitoring networks globally, causing food spoilage and equipment risks following disruptions across Europe.
OpenSSH Rushes Patch for 'SSHole' Authentication Bypass
OpenSSH released version 10.6p2 to fix a critical flaw allowing attackers to log into password-disabled accounts on musl libc systems (such as Alpine Linux) by supplying passwords between 257 and 1,024 characters long.
Barracuda ESG Exploit Chain Grants Remote Root Without Login
Researchers released details on an unauthenticated exploit chain combining CVE-2026-116606 and CVE-2026-111560 to achieve full root command execution on Barracuda Email Security Gateway appliances.
Chainalysis Breach Compromises User Credentials and Session Tokens
An agentic cyber attack against Chainalysis exposed customer names, usernames, password hashes, and active session tokens, prompting the shutdown of its Reactor and Data Solutions services.
D-Link Alerts to Unpatched Zero-Days in DGS-3130 Switches
D-Link released mitigation guidance for multiple unpatched vulnerabilities affecting DGS-3130 series Gigabit stackable switches while firmware fixes are underway.
Windows Paint RCE Patch Excluded From Standard Windows Updates
Microsoft addressed CVE-2026-83844, a remote code execution vulnerability in Windows Paint, but administrators must deploy the fix manually through the Microsoft Store rather than normal Windows Update channels.
Stealth Linux Backdoor CWPdoor Discovered in Control Web Panel
Threat actors are replacing the core web server on Control Web Panel hosting installations with a trojanized binary that executes commands received via web requests without generating access log entries.