Threat Post

Hackers Take Aim at SSH Keys in New Attacks

SSH private keys are being targeted by hackers who have stepped up the scanning of thousands of WordPress website in search of private keys. SSH private keys are being targeted by hackers who have ...
Ars Technica

Making SSH Private keys more secure

which talks about beefing up the security of the passphrase of your SSH private key. The article (as I understand it) discusses that by default, your SSH private key passphrase is essentially just a ...
Techno-Science.net

3 Ways to Generate SSH Keys on Windows

If you do your work via cloud computing, accessing remote servers that are not on your current or home network, you are probably already familiar with SSH or Secure Shell Keys. Because SSH keys are ...
Business Wire

Bitwarden Secure Shell (SSH) Agent Enhances Secure Key Management Within Password Manager

SANTA BARBARA, Calif.--(BUSINESS WIRE)--Bitwarden, the trusted leader in password, secrets, and passkey management, today announced it has strengthened its Password Manager with secure shell ...
techtimes

GitHub's RSA SSH Private Key Leaks! Was It a Breach?

GitHub's RSA SSH private key was accidentally leaked to the public, as confirmed by the code hosting platform's CEO, Mike Hanley. An engineer from the Israeli company "Commun.it" uses his expertise in ...
techtimes

Cisco Rolls Out Patches For Virtual Appliances With Default SSH Keys Vulnerabilities

Cisco has pushed out patches for three virtual appliances that shipped with default Secure Shell (SSH) encryption key vulnerabilities, which pose a risk of a hacker decrypting traffic with the keys.
Bleeping Computer

Attackers Start Scans for SSH Keys After Report on Lack of SSH Security Controls

Crooks are mass-scanning online sites for directories containing SSH private keys so they can break into websites with any accidentally exposed credentials. SSH authentication can work via the classic ...
Threat Post

Private SSH Key, Weak Default Credentials Removed From ExaGrid Appliances

ExaGrid has removed public-private pairings and weak, hardcoded default credentials from its disk-backup appliances. ExaGrid has removed a private SSH key and weak, hardcoded credentials shipping with ...
Computerworld

Millions of embedded devices use the same hard-coded SSH and TLS private keys

Thousands of routers, modems, IP cameras, VoIP phones and other embedded devices share the same hard-coded SSH (Secure Shell) host keys or HTTPS (HTTP Secure) server certificates, a study found. By ...
ZDNet

OpenSSH gets protection against attacks like Spectre, Meltdown, Rowhammer, and Rambleed

The OpenSSH project is getting protection against side-channel attacks that are known to leak data from a computer's memory, and allow malicious threat actors to steal sensitive information. The ...
Network World

Setting up passwordless Linux logins using public/private keys

Using a set of public/private keys to allow you to log into a remote Linux system or run commands using ssh without a password can be very convenient, but setup is just tad tricky. Here's how and a ...