Security news.
Active exploitation targeting network edge devices and widespread open-source infrastructure headlines today's brief, with OpenSSH, SonicWall, and QNAP appliances facing targeted intrusions. Major credential and supply-chain exposure incidents also emerged across consumer platforms, automotive connected-car systems, and cryptocurrency infrastructure. Administrators should prioritize updates for internet-exposed systems and audit external authentication workflows.
Hackers Target 'SSHole' OpenSSH Authentication Bypass
Botnets and crypto miners are actively exploiting CVE-2026-123158, an authentication bypass in OpenSSH running on the musl C library without PAM, allowing root access on unpassworded accounts.
CISA Adds SonicWall SonicOS MFA Bypass to KEV Catalog
U.S. officials added CVE-2026-19868 to the Known Exploited Vulnerabilities catalog following reports of real-world exploitation that allows attackers to bypass SAML-enforced multi-factor authentication on SSL-VPNs.
QNAP Warns of Active 'Plex2Shell' Exploitation on NAS Units
Threat actors are leveraging a four-vulnerability exploit chain against the Plex Media Server application on QNAP network-attached storage devices to achieve code execution.
Agencies Warn of Targeted Attacks on Cold-Chain and Refrigeration Controllers
U.S. and European authorities alert that attackers are compromising unpatched industrial refrigeration controllers, risking inventory destruction and fire hazards by forcing units into continuous heating.
Default Credentials in Auto Identity Backend Allowed Remote Vehicle Takeover
Researchers discovered default "admin:admin" credentials on ForgeRock identity servers behind mobile applications for two automakers, enabling remote access to unlock doors and start engines.
Web3Auth Flaw Exploited to Drain Keplr Wallets
Hackers exploited an authentication bug in Web3Auth's social sign-in service to compromise Keplr crypto wallets, prompting the provider to proactively empty remaining at-risk accounts for protection.
Iris Plaza Breach Exposes 7.7 Million Shopper Records
Iris Ohyama disclosed that unauthorized access to a third-party cloud service utilized by its Iris Plaza retail platform potentially exposed personal data belonging to 7.7 million customers.
Frontline Education Data Breach Affects Over 3 Million Individuals
A confirmed breach of Frontline Education's systems compromised sensitive personal data associated with more than 3 million school district employees and students.