Daily Brief
OpenSSH flaw and phishing campaigns target accounts
OpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH flaw allows attackers to log into certain Alpine Linux and other musl-based systems even when password authentication is meant to be disabled. OpenSSH has rated the issue critical and released a fix; it matters because key-only accounts can still be reached if the service is exposed.
Prioritise patching OpenSSH on Alpine and other musl-based hosts, then scan for any internet-facing SSH services that allow account enumeration or unauthorised logins.
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Attackers are sending fake OpenAI, SpaceX and Anthropic event invitations to lure employees into phishing flows that steal Microsoft and Google credentials and authentication sessions. The use of phishing-as-a-service platforms makes the campaign easier to scale and harder to block with simple domain filtering.
Alert users to fake event invitations and review detections for suspicious Microsoft and Google sign-in sessions, especially where MFA prompts are followed by rapid session theft.