RC RANDOM CHAOS

linux

2 posts

SSHole exploited within hours of its November 5 fix
Article

SSHole exploited within hours of its November 5 fix

SSHole (CVE-2026-123158) lets an oversized password log into musl-based OpenSSH with PAM off; plus trojanized updaters and AI on both sides of attacks.

 Your browser tab runs as root on Omarchy
Article

Your browser tab runs as root on Omarchy

Omarchy versions before 4.0.1 put the default user in the docker group, giving any process in the session a passwordless path to root. Update to 4.0.1.