Hacker News
The DefendOps DiariesPumaBot is shaking up IoT security by targeting vulnerable Linux devices with weak SSH credentials—hijacking systems for crypto mining. Are your gadgets really safe?
https://thedefendopsdiaries.com/pumabot-a-new-threat-in-iot-security/
A major flaw in Erlang/OTP SSH now lets attackers run code without needing any credentials—imagine leaving your front door wide open. Is your system at risk? Dive into the details and learn how to lock it down.
#cve202532433
#erlang
#sshsecurity
#remotecodeexecution
#cybersecurity
National Security Agency 
Attention all individuals and organizations utilizing Secure Shell (SSH) technology:
As per the recent legislation passed by the government, all #SSH keys must now be stored in a government-approved #escrow service. This measure has been implemented as a security precaution to safeguard against potential cyber threats and ensure the safety and security of our nation's vital information.
All individuals and organizations that currently use SSH #technology are required to comply with this new law and must register their SSH keys with a government-approved escrow service by January 32nd 2024. Failure to do so may result in legal consequences.
We understand that this may cause some inconvenience, but we assure you that all necessary steps have been taken to ensure the security and confidentiality of your information.
If you have any questions or concerns, please reach out to the National Security Agency (@NSA) for assistance.
Thank you for your cooperation and understanding.
#SSHsecurity #Cybersecurity #Governmentcompliance #NationalSecurity #EscrowService #KeyRegistration
As per the recent legislation passed by the government, all #SSH keys must now be stored in a government-approved #escrow service. This measure has been implemented as a security precaution to safeguard against potential cyber threats and ensure the safety and security of our nation's vital information.
All individuals and organizations that currently use SSH #technology are required to comply with this new law and must register their SSH keys with a government-approved escrow service by January 32nd 2024. Failure to do so may result in legal consequences.
We understand that this may cause some inconvenience, but we assure you that all necessary steps have been taken to ensure the security and confidentiality of your information.
If you have any questions or concerns, please reach out to the National Security Agency (@NSA) for assistance.
Thank you for your cooperation and understanding.
#SSHsecurity #Cybersecurity #Governmentcompliance #NationalSecurity #EscrowService #KeyRegistration