AI Image
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
The Hacker News • • technology
Key Points:
- A critical OpenSSH vulnerability (CVE-2026-123158) allows attackers to sign into accounts with blank passwords on Linux systems using musl C library and PAM disabled, with 20 exploitation attempts recorded globally.
- A trojanized Control Web Panel web server daemon (cwpsrv) is distributing the stealthy CWPdoor backdoor, which executes commands remotely via special HTTP/HTTPS headers while suppressing logs.
- Debian and Ubuntu APT package manager flaw (CVE-2026-109518) enables attackers in a network position to install malicious packages with root privileges by exploiting HTTP retry settings.
- Indian CERT-In warns of AI-assisted threat actor Crafty Falcon targeting financial organizations during low-monitoring periods, indicating an escalation in AI-driven cyberattacks.
- Zyxel patched a zero-day vulnerability (CVE-2026-107441) exploited to compromise nearly 1,000 GS1900 series network switches worldwide, deploying backdoors and rootkits attributed to a Chinese-speaking threat group.
