OpenSSH “SSHole” (CVE-2026-123158): password bypass on Alpine and other musl-based Linux
A flaw in how OpenSSH handles locked accounts on musl-based systems was exploited within two days of the fix. Who is affected and what to check.
Read article
CySec blog
Linux — articles and guides
All CySec articles about Linux: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
Ubuntu server hardening: the first hour after installation
A practical checklist with commands: personal admin account, SSH keys, firewall, automatic security updates and fail2ban.
Read articleEncrypted Linux server backups with restic: step by step
Fast, encrypted, deduplicated backups to a NAS or cloud storage, with automatic retention and a restore test.
Read articleDocker security basics for small teams
Containers are not automatically secure. Published ports, root users and old images are the usual problems — here is how to fix them.
Read articleregreSSHion (CVE-2024-6387): a remote code execution flaw in the OpenSSH server
An old bug returned to OpenSSH and allowed unauthenticated code execution as root on Linux servers. Why SSH should never be wide open.
Read articleXZ Utils backdoor (CVE-2024-3094): the supply-chain attack that was caught just in time
A backdoor was hidden in a compression library used by Linux SSH servers. It was found by chance before reaching most stable systems. What it teaches about trust in software.
Read articleLet's make your IT secure and predictable
Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.