Security news.
Today's security landscape is dominated by critical infrastructure attacks, widespread credential exposures, and fast-moving edge appliance exploits. Federal agencies are raising alarms over coordinated cyberattacks compromising cold-chain systems globally, while OpenSSH admins face active exploit attempts against a newly surfaced authentication bypass. Additionally, significant breaches at major enterprise service providers underline the urgent need to audit customer credentials and review external exposures.
Hackers Target OpenSSH 'SSHole' Bypass Within Hours of Disclosure
Threat actors are actively exploiting CVE-2026-123158, an 8.1-severity flaw impacting OpenSSH on systems utilizing musl libc without PAM, allowing authentication bypass on accounts without set passwords.
FBI and CISA Warn of Cyberattacks Targeting Industrial Refrigeration
Global operations are targeting refrigeration and cold-chain monitoring systems across supermarkets and medical facilities, risking widespread product spoilage, physical equipment damage, and cascading supply chain disruptions.
Chainalysis Discloses Breach Compromising Customer Credentials and Tokens
An intrusion into internal tooling exposed user names, password hashes, and active session tokens for all Chainalysis clients, prompting the temporary shutdown of core data and reactor services.
CISA Adds SonicWall SonicOS SSLVPN Flaw to KEV Catalog
Federal agencies have been ordered to mitigate CVE-2026-19868, a single-factor authentication vulnerability in SonicWall SonicOS SSLVPN actively abused as an initial access vector.
Barracuda ESG Vulnerability Chain Allows Pre-Auth Remote Root Access
Researchers demonstrated an unauthenticated exploit chain leveraging CVE-2026-116606 and a secondary flaw to achieve complete root compromise on Barracuda Email Security Gateway appliances.
QNAP NAS Devices Breached in Plex2Shell Attack Campaign
Threat actors are actively compromising network-attached storage appliances by chaining Plex Media Server vulnerabilities, prompting urgent patch advisories for all QNAP users.
D-Link Issues Mitigations for Multiple Zero-Days in DGS-3130 Switches
Multiple unpatched security flaws impacting managed stackable switches have prompted vendor-issued workarounds while firmware updates remain in development.