OSINT Wire

StreamingMonitoring Hacker News · Keyword triage · CVE extraction ·

42 flagged today

Wire

Critical auth-bypass in OpenSSH-compatible servers (CVE-2026-3311)· 18m agoRansomware crew claims breach of regional hospital network, leaks sample records· 41m agoShow HN: Static analyzer that flags typosquatted npm dependencies pre-install· 1h agoChrome patches actively-exploited V8 sandbox escape· 2h agoNew speculative-execution side channel demonstrated on recent ARM cores· 3h agoPopular Java logging shim vulnerable to unauthenticated deserialization· 4h agoAsk HN: how do you rotate long-lived secrets across a large fleet without downtime?· 5h agoThreat actor selling access to unpatched VPN appliances, researcher says· 6h agoCritical auth-bypass in OpenSSH-compatible servers (CVE-2026-3311)· 18m agoRansomware crew claims breach of regional hospital network, leaks sample records· 41m agoShow HN: Static analyzer that flags typosquatted npm dependencies pre-install· 1h agoChrome patches actively-exploited V8 sandbox escape· 2h agoNew speculative-execution side channel demonstrated on recent ARM cores· 3h agoPopular Java logging shim vulnerable to unauthenticated deserialization· 4h agoAsk HN: how do you rotate long-lived secrets across a large fleet without downtime?· 5h agoThreat actor selling access to unpatched VPN appliances, researcher says· 6h ago

Feed8 posts

HN-51190criticalopenssh-project.org

Critical auth-bypass in OpenSSH-compatible servers (CVE-2026-3311)

View on Hacker News

96score

812 points341 commentsposted 09:24

CVEZero-DayCVE-2026-3311

AI Triage Summary

A pre-auth bypass affecting a widely deployed SSH fork. Public PoC is circulating and exploitation attempts have already been observed against exposed jump hosts.

Discussion signal — Commenters note the affected fork ships as the default SSH daemon on several popular NAS appliances.

Comment tone breakdown

Technical

71%

Alarmist

21%

Speculative

Scanned

1,284

New CVEs